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INTRODUCTION 


The failure mode and effects analyses (FMEA) were performed during preliminary R 
and detail design in order to identify all MOD-2 failure modes and to ensure 
that the resultant effects are: (1) acceptable from a safety standpoint and 

(2) fail safe or, if not fail safe, represent least cost solutions (i.e., 
result in the lowest cost of electricity). 

The FMEA's were completed by the cognizant designers and reviewed by system 
engineers and a reliability specialist. In general, fail safe design is 
employed wherever cost effective and a safe life design is employed for 
single thread structural items such as the rotor. The failure severity code 
used in the analysis is described in Table 1. 

Completion of the FMEA's by the designers <as an in-line part of the design 
process resulted in numerous design changes to either prevent serious failure 
modes or reduce their impact. The FMEA's contained herein reflect the detail 
design configuration. All major changes incorporated subsequent to the DDR R 

will be evaluated relative to personnel safety and cost of ele’ctricity. R 

Whenever applicable, failure frequency data has been included in the analyses. 

This data was used to quantify the probability of occurrences and hence the, 
impact on the cost of electricity. ‘ ’ 

SUMMARY OF RESULTS 

Over 860 failure modes were analyzed and numerous corrective actions were R 

implemented to preclude costly failures. .Special attention was directed at 
all potentially catastrophic failure modes; the results of this effort are 
summarized in Table 2. 

Wherever practical, redundancy -is used to preclude catastrophic failures. 

Safe life design is employed for items whose failure could cause serious 
damage, but could not be made redundant (e.g., blade fatigue cracks). The 
ability to control each rotor pitch control surface independent of the 
other precludes several potentially serious failure modes such as control 
linkage binding or bearing failures (the MOD-2 design provide for an orderly 
shutdown with just one control tip operative). The most probable, potentially 
catastrophic failure mode is the rapid progression of a fatigue crack in the 
blade. The MOD-2 design has incorporated a crack detection system which will R 
cause an orderly WTS shutdown prior to suffering significant rotor damage. 

The detailed FMEA sheets are contained in Appendix A, and relevant electrical/ 
hydraulic schematics are included in Appendix B. Appendix C contains the 
results of a staff analysis of WTS emergency shutdowns. Appendix D contains 
an FMEA of the cable runs and both slip rings. 
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Summary of Revisions (Initial Analysis at PDR; this revision at DDR) 

The purposes for this revision are: (1) to update the FMEA based on changes 

to the MOD-2 configuration that have occurred since the prel iminary- design 
review (PDR), (2) to add a new section that contains an analysis of the 
possible effect of electrical failures that have a potential for causing 
numerous secondary failures (e.g., a wire shorts and causes other wires in 
the same bundle to short to ground or to other wires) and (3) to add a 
new section that contains an analysis of the possible effects of contact- 
to-contact shorts of adjacent slip rings in the two slip ring assemblies. 

The latter two sections could not be completed at the PDR since cable runs 
and slip ring assignments had not yet been established. 

The major configuration changes covered by this revision are: 

1. Addition of ice detection and crack detection systems. 

2. Changes in the gearbox lubrication system to take advantage 
of the pump redundancy. 

3. Deletion of the delta pressure sensors in the yaw hydraulics 
system. 

4. Changes in the yaw drag brake caliper to make the drag propor- 
tional to hydraulic pressure rather than depending upon a 
mechanical spring. 

The following pages have been added: 
n i - rew page 

Pages 273 through 295 Appendix D (new section) 


The following pages have been revised: 
i , n , v ( was page iv) 

1, 2, 29, 46, 69.1, 72, 82, 98, 129, 148, 169, 262, 263, 266a, 
267 & 268 


TABLE 1, SAFETY AND FAILURE SEVERITY CATEGORY GUIDE 


HAZARD 

CATEGORY 

IMPACT 

FUNCTION 

REPAIR COST 

TIME TO REPAIR 

PERSONNEL 

INJURY 

Minimal 

a 

None 

(1) 

nd a 

Under $1000 

nd a 

Under 2 Days 

nd 

None 

Marginal 

None ar 

Critical 

(2) 

d an 

Under $1,000 

d an 

Under 2 Days 

d 

First Aid 

Critical 

Loss of o 

Function 
(3) 

r o 

Up to $10,000 

r o 

Up to 10 Days 

r 

Hospital 

Catastrophic 

Loss of c 

System 

(4) 

r Over 0 

$10,000 

r Over 0 

10 Days 

r Fatal or 
Permanent 
Disable 


Impact values include the dollar and human cost of an unplanned event 
(a realized hazard). 

Hospitalization is a severity category; includes wound stitches, extensive 
burn treatment, broken bone setting and equivalents. 

Permanent Disablement includes loss of limb, sight or other majority 
body function. 

*With the exception of flying objects emanating from the WTS, personnel 
injury can only occur during period of preventative and corrective 
maintenance. 


(1) Minor items that can be repaired with convenient. 

(2) No loss of generating capability, but repair must be accomplished 
within 2 weeks to avoid shutdown. 

(3) Causes WTS shutdown. 

(4) Destruction of major element such as rotor or gear box. 

TABLE 1, SAFETY AND FAILURE CATEGORY GUIDE 
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Table 2, Summary of Major Failures and Effects — MOD-2- 107 


Failure 

Effect 

Corrective action 

Structural failures 



Rotor 



• Ice forms and is thrown off 

Could injure public — remote possibility 

Ice detection system added 

• Blade fatigue cracks 

Loss of part of rotor and possible 

Crack detection system shuts down 

• Spar buckling 

• Fatigue crack at control 
tip spindle end thread or at 

secondary damage if allowed to progress 

WTS prior to incurring serious damage 
Safe life design 
Fatigue tests 

tip-blade interface 

• inboard joint-rotor to hub bolt 
or flange weld failure 

• Broken teeter trunnion or flange 
cracks 

• Buckling inboard sections or hub 
compression skins 

Drive 

• Broken low speed shaft 


Inspection schedule 
Mid-blade assembly buckling test 

Emergency shutdown effected prior 

• Broken quill shaft bulkhead 
joint 

Loss of load 

to reaching damaging overspeed 
Safe life design 

• Teeter shaft or flange cracks 
Tower 

Possible extensive rotor damage 

Strain gage correlation 
Safe life design 

• Failure of structure or foundation 

Extensive damage 

Safe life design 

Control system failures 



• Signal to one tip incorrectly drives 

Emergency shutdown triggered by 

None required, analysis verifies that 

control surface to zero pitch 
• Control linkage to one tip jams 

differential of tip position signals 

one tip operative can safely stop rotor 

• Control system signal to both 

Emergency shutdown triggered by 

None required — shutdown occurs prior 

pitch actuators incorrectly drives 
control surfaces to zero pitch 

generator output power sensor 

to damaging overspeed 

• Power output sensor fails, calling 

Damaging overspeed possible if load 

System changed to command shutdown 

for power increase when system 
is already at full power output 

Electrical power failures 

drops off prior to initiating shutdown 

prior to load dropping off Also, backup 
power sensor signal sent to controller , 

• Synchronizer provides signal to 

High current transient causing high torque 

Synchronizer is fully redundant and 

close bus tie contactor too soon or 
too late (WTS not proper phase 
relationship or voltage to mate 
with bus) 

load on the generator that could cause 
mechanical damage to generator or 
drive train 

fail safe 

• Loss of commercial power while 
WTS is at rated power 

Rotor speed increases 

None required — shutdown occurs prior 
to damaging overspeed 
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TABLE OF CONTENTS 


Control Number 

Item 

Page 

4.0 

Rotor Subassembly 

— 

4.1 

Rotor Blade 

-- 

4.1.1 

Shell Structure 

1 

4.1.2 

Spars 

2 

4.1.3 

Inbrd. Joint 

3 

4.1.4 

Pivot Spindle 

4 

4.2 

Hub 

5 

4.3 

Pitch Change Mechanism 

-- 

4.3.1 

Hydraul ics 

— 

4. 3. 1.1 

Actuators 

8 

4. 3. 1.2 

Reservoir 

9 

4.3. 1.3 

Accumulators 

10 

4.3. 1.4 

Valves 

-- 

4. 3. 1.4.1 

Start-Stop Valves 

11 

4. 3. 1.4. 2 

System Relief Valve 

12 

4. 3. 1.4. 3 

Teeter Brake Valve 

13 

4. 3. 1.4. 5 

Servo Valve 

14 

4. 3. 1.4. 5 

Shuttle Valve 

15 

4. 3. 1.5 

Fittings & Hoses 

16 

4. 3. 1.6 

Filters 

17 

4. 3. 1.7 & 8 

Motor - Pump Assembly 

18 

4. 3. 1.9 

Sensing Devices (See controls) 

-- 

4.3.1.10 

Electrical Cables 

-- 

4.3.1.10.1 

Control Cable to Tip No. 1 Actuator 

19 

4.3.1.10.2 

Control Cable to Tip No. 2 Actuator 

20 

4.3.1.10.3 

Tip No. 1 Bonding Strap 

21 

4.3.1.10.4 

Tip No. 2 Bonding Strap 

22 

4.3.1.10 

Cables and Connectors (See controls) 

-- 

4.3.1.11 

Emergency Feather Device (See controls) 

— 

4.3.2 

Feather Lock Mechanism 

23 

4.3.3 

Fasteners, Rod Ends 

24 
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5.0 

5.1 

5.1.1 

5.1.2 

5.1.3 

5.1.4 

5.1.5 

5.1.6 

5. 1.6.1 

5. 1.6. 2 

5. 1.6. 3 

5. 1.6. 3.1 

5.1 .6.3.2 

5. 1.6. 3. 3 

5. 1.6. 3. 4 
5. 1.6. 3. 5, 

5. 1.6. 4 
5.2 

5.2.1 

5.2.2 

5.3.1 

5.3.2 

5.3.3 

5.4 
5.4.1 

5.4.1 

5.5 

5.6 

5.6.1 

5.6.2 

5.6.3 

5.7 
6.0 
6.1 


Drive Train Subassembly 

Low Speed Shaft and Bearings 

Shaft (Part of low speed shaft & bearings) 25 

Radial Bearing 26 

Teeter Bearing ' 27 

Radial Thrust Bearing 28 

Teeter Stop 29 

Electrical Distribution Equipment 

Slip Rings 30 

Slip Ring Junction Box 31 

Electrical Cables 

Power Cable to Hydraulic System 32 

Control Cable to Hydraulic System 33 

Rotor Actuator Control Cable 34 

Flex Cable Across Teeter Bearing 35 

Teeter Bearing Bonding Strap , 36 

Rotor Junction Box 37 

Quill Shaft and Couplings 

Quill Shaft 38 

> Quill Shaft Coupling _ 39 

Gearbox Mounting Installation 40 

Gears and Shafts 41 

Gear Box Bearings 42 

High Speed Shafts and Couplings 
High-Speed Shaft 43 

High Speed Shaft Couplings 44 

Rotor Brake 45 

, Lubrication System 

Gearbox Lubrication 46 

Rotor Bearing Lubrication 47 

Generator Lubrication' 48 

Generator 49 

Nacelle Subassembly 
. Nacelle Structure 
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6.1.1 

Primary Truss Structure 

50 

6.1.2 

Secondary Support Structure 

51 

6.1.3 

Yaw Bearing Support Structure 

52 

6.1.4 

Forward Bearing Support 

53 

6.1.5 

Aft Bearing Support 

54 

6.1.6 

Enclosure 

55 

6.3 

Yaw Drive System 

-- 

6.3.1 

Brake Disc 

56 

6.3.2 

Bearing, Gear, Pinions 

57 

6.3.3 

Gear Box 

58 

6.3.4 

Hydraulic Motor 

59 

6.3.5 

Hydraulic Pump and Motor 

60 

6.3.6 

Hydraulic System Components 

— 

6. 3. 6.1 

Reservoir 

61 

6. 3. 6. 2 

Heat Exchanger 

62 

6. 3. 6. 3 

- Accumulators 

63 

6. 3. 6. 4 

Relief Valve 

64 

6. 3. 6. 5 

Solenoid Valves 

. 65 

6. 3. 6. 6 

Motor Control Valve 

66 

6. 3. 6. 7 

Fittings, Tubes, Hoses - Yaw System 

67 

6. 3. 6.8 

Fittings, Tubes, Hoses - Yaw Brake 

68 

6. 3. 6. 9 

Fittings, Tubes, Hoses - Rotor Brake 

69 

6.3.6.10, 11 

High Pressure and Low Pressure Filters 

- 69.1 

6.3.6.12 

Check Valves 

69.2 

6.3.6.13 

Needle Valve 

69.3 

6.3.7 

Weather Shield 

70 

6 3.8 

Miscellaneous Fasteners 

71 - 

6.3.9 

Brake Calipers 

72, 

6.3.10 

Yaw Sensors (See Controls) 

— 

6.5 

Environmental Control System 

-- 

6.5.1 

Cooling Equipment 

73 

6.5.2 

Heating Equipment 

74 

6. 6. 1 . 1 

High Voltage Power Cable to GAU 

74.1 

6.6 

Electrical Cables 

— 

6.6.1 

High Voltage Power Cables 

75 
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6.6.2 

Accessory Power Cables 

-- 

6. 6. 2.1 

Main 480 Volt Feeders 

76 

6. 6. 2. 2 

AC Power Cable to the Control System 

77 

6. 6. 2. 3 

DC (Uninterruptable) Power to the C.S. 

78 

6. 6. 2. 4 

Power Cable to Yaw Drive System 

79 

6. 6. 2. 5 

Power Cable to Pitch Control System 

80 

6. 6. 2. 6 

Power Cable to Gear Box Oil Heaters 

81 

6. 6. 2. 7 

Power Cable to Lubrication System 

82 

6. 6. 2. 8 

Power Cable to Environmental Control System 

83 

6. 6. 2. 9 

Power Cable to Electrical Facilities Eqpt. 

84 

6.6.2.10 

Uninterruptable Power Feeders 

05 

6.6.3 

Control and Instrumentation Cables 

-- 

6.6.3. 1 

Generator Control Cable 

86 

6. 6. 3. 2 

Control Cable to the Generator Acc. Unit 

87 

6. 6. 3. 3 

Control Cable to Rotor 

88 

6. 6. 3. 4 

Control Cable 

89 

6. 6. 3. 5 

Control Cable to Tower 

90 

6. 6. 3. 6 

Control Cable to Gear Box 

91 

6. 6. 3. 7 

Control Cable to Lub. System 

92 

6. 6. 3. 8 

Control Cable to Yaw Drive System 

92.1 

6.6.4 

Slip Ring Brush Assembly (Drive Train) 

93 

6.8 

Generator Assessorv Unit 

-- 

6.8.1 

Generator Circuit Breaker 

94 

6.8.2 

Generator Excitation Controls 

-- 

6.8.2. 1 

Voltage Regulator 

95 

6.8. 2. 2 

Power Factor Controller 

96 

6. 8. 2.3 

Field Current Relay 

97 

6.8.3. 

Generator Protective Relays 

-- 

6. 8.3.1 

Over Voltage Relay 

98 

6.8.3. 2 

Under Frequency Relay 

99 

6. 8.3. 3 

Over Current Relay 

100 

6. 8. 3. 4 

Reverse Power Relay 

101 

6.8.3. 5 

Ground Current Relay 

102 

6. 8. 3. 6 

Differential Protection Relay 

103 
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6. 8. 3. 7 

Generator Winding Overtemperature Relay 

103.1 

6. 8. 3.8 

Generator Bearing Overtemperature Relay 

103.2 

6. 8. 3. 9 

Loss of Excitation Relay 

103.3 

6.8.3.10 

Power Factor Relay 

103.4 

6.8.3.11 

Generator Bearing llndertemperatur'e Relay 

103.5 

6.8.4 

Generator Instrumentation Transformers 

- - 

6.8.4. 1 

Potential Transformers 

104 

6. 8. 4. 2 

Current Transformers 

105 

6.8.5 

Generator Instrumentation Transducers 

- - 

6. 8. 5.1 

Voltage Transducer 

106 

6.8. 5.2 

Current Transducer 

107 

6. 8. 5. 3 

Real Power Transducer 

108 

6.8. 5.4 

Reactive Power Transducer 

109 

6.8. 5. 5 

Generator Temperature Transducer 

109.1 

6.8.6 

Accessory Power Transformer 

110 

6.8.7 

Accessory Power Circuit Breaker Panels 

- - 

6.8. 7.1 

480 Volt Circuit Breaker Panel 

111 

6. 8. 7. 2 

115/230 Volt Circuit Breaker Panel 

112 

6.8.8 

GAU Internal Wiring 

- - 

6. 8. 8.1 

4.16 KV Buses 

114 

6.8. 8. 2 

480 Volt Circuits 

115 

6. 8. 8. 3 

115/230 Volt Circuits 

116 

6. 8. 8. 4 

D.C. Circuits 

117 

6. 8. 8. 5 

Control Circuits 

118 

6.9 

Electrical Facilities 

_ _ 

6.9.1 

Lighting Equipment 

119 

6.9.2 

Convenience Outlets 

120 

6.9.3 

Aircraft Warning Lights 

121 

7.0 

Tower Subassembly 

- - 

7.1 

Tower 

- - 

7.1.1 

Tower Structure 

122 

7.1.2 

Nacelle Access Device 

123 

7.1.3 

Ladder 

124 

7.1.4 

Tower Foundation 

125 
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7.2 

Electrical Cables 

125 

7.2.1 

High Voltage Cables 

- - 

7. 2. 1.1 

Tower HV Cable 

126 

7. 2. 1.2 

Tower to BTBU HV Cable 

127 

7. 2. 1.3 

BTBU to Transformer HV Cable 

128 

7.2. 1.4 

Aerial HV Cable 

129 

7.2.2 

Accessory Power Cables 

- - 

7.2.2. 1 

Accessory Power Feeder to the Tower Jet. Box 

130 

7. 2. 2. 2 

Accessory Power Feeder to the Nacelle 

131 

7. 2. 2. 3 

Accessory Power Cable to the Tower Cont. Unit 

132 

7. 2. 2. 4 

Acc. Power Cable to the Lift System 

133 

7.2. 2,5 

Acc. Pwr. Feeder to Twr. Elec. Facility 

134 

7. 2. 2. 6 

Acc. Pwr. Cable to Pwr. Output Transformer 

135 

7. 2. 2. 7 

Uninterruptable Pwr. Fdr. to Twr. Junction Box 

136 

7. 2. 2. 8 

UPS Cable to Tower Control Unit 

137 

7. 2. 2. 9 

UPS Feeder to Nacelle 

138 

7.2.3 ' 

Control Cables 

- - 

7. 2. 3.1 

Control Cable to Nacelle • 

139 

7. 2. 3. 2 

Control Cable to BTB Unit 

140 

7.3 

Cable Transition Mechanism 

141 

7.4 

Lightning Protection System 

- - 

7.4.1 

Electrical Path Across Yaw Bearing 

142 

7.4.2 

Generator Lightning Arrestors 

143 

7.4.3 

Transformer 1 Lightning Arrestors 

144 

7.4.4 

Earth Grid 

145 

7.4.5 

Connection to Earth Grid 

146 

7.6 

Electrical Equipment 

- - 

7.6.1 

Bus Tie Breaker Unit 

- - 

7. 6. 1.1 

BTBU Enclosure 

147 

7.6. 1.2 

Bus Tie Contactor (BTC) 

148 

7. 6. 1.3 

Bus Tie Controls 

- - 

7. 6. 1.3.1 

Synchronizer 

149 

7. 6. 1.3. 2 

Differential Protection Relay 

150 

7. 6. 1.4 

Bus Tie Instrumentation 
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7. 6. 1.4.1 

Generator Voltmeter 

151 

7. 6. 1.4. 2 

Utility Voltmeter 

152 

7. 6. 1.4. 3 

Generator Ammeter 

153 

7. 6. 1.4. 4 

Line Ammeter 

154 

7. 6. 1.4. 5 

Generator KW Meter 

* 155 

7. 6. 1.4. 6 

Generator PF Meter 

156 

7. 6. 1.4. 7 

Generator KWH Meter 

157 

7. 6. 1.4. 8 

Line KWH Meter 

158 

7. 6. 1.4. 9 

Potential Transformer 

159 

7.6.1.4.10 

Current Transformer 

160 

7.6.1.4.11 

Generator Total Running Hours 

161 

7.6.1.4.12 

BTC Operating Cycles 

162 

7. 6. 1.5 

Accessory Power Transformers 

— 

7. 6. 1.5.1 

4.16 KV to 480 Volt Transformer 

167 

7. 6. 1.5. 2 

480 Volt to 115/230 Volt Transformer 

168 

7. 6. 1.6 

Uninterruptable Power Supply 


7. 6. 1.6.1 

Battery 

169 

7. 6. 1.6. 2 

Battery Charger 

170 

7. 6. 1.6. 3 

Battery Heater 

171 

7. 6. 1.7 

BTBU Internal Wiring 

-- 

7. 6. 1.7.1 

High Voltage Input Bus 

172 

7. 6. 1.7. 2 

High Voltage Output Bus 

173 

7. 6. 1.7. 3 

480 Volt Acces. Power Circuit 
Breaker Panel 

174 

7. 6. 1.7. 4 

115/230 Volt Acces. Power Circuit 
Breaker Panel 

175 

7. 6. 1.7. 5 

Uninterruptable Power Circuit 

176 

7. 6. 1.7. 6 

Control Circuit 

177 

7.6.2 

Power Output Transformer 

178 

7.6.3 

Fused Manual Disconnect Switch 

179 

7.7 

Control Subsystem 

179.1 

7.7.1 

Power Failure Restart Circuit 

180 

7.7.2 

CPU, PROM and Data Bus 

181 
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7.7.3 

Interrupt Logic 

182 

7.7.4 

Oeleted 

183 

7.7.5 

Serial I/O Circuits 

184 

7.7.6 

Fail Safe System 

185 

7.7.7 

RPM Signal 

186 

7.7.8 

No. 1 Vibration Signal 

187 

7.7.9 

No. 2 Vibration Signal 

188 

7.7.10 

Bearing Overtemperature #1 

189 

7.7.11 

Bearing Overtemperature #2 

190 

7.7.12 

Deleted 

191 

7.7.13 

Teeter Brake Unlock System 

192 

7.7.14 

Emergency Accumulator 

193 


Command Signal 

7.7.15 

Pitch Hyd. Pump On Command Signal 

194 

7.7.16 

Pitch Hyd. Pump Off Signal 

195 

7.7.17 

No. 1 Pitch Servo Command Signal 

196 

7.7.18 

No. 2 Pitch Servo Command Signal 

197 

7.7.19 

No. 1 Blade Pitch Position Signal 

198 

7.7.20 

No. 2 Blade Pitch Position Signal 

199 

7.7.21 

Blade Locked #1 Signal 

200 

7.7.22 

Pitch Hyd. Filter Clogged Signal 

201 

7.7.23 

Blade Lock #2 Signal 

202 

7.7.24 

Pitch Hyd. Oil Temp. High Signal 

203 

7.7.25 

Pitch Hyd. Oil Pressure Low Signal 

204 

7.7.26 

Pitch Accumulators Precharge Low 

205 

7.7.27 

Pitch Hyd Oil Level Low Signal 

206 

7.7.28 

Gear Box Oil Temperature High Signal 

207 

7.7.29 

Gear Box Oil Pressure Low Signal 

208 

7.7.30 

Gear Box Oil Level Low Signal 

209 

7.7.31 

Gear Box Oil Temp. Low 

210 

7.7.32 

Gear Box Oil Flow Low Signal 

211 

7.7.33 

Deleted 

212 

7.7.34 

Gear Box Oil Pump On Command Signal 

213 

7.7.35 

Gear Box Oil Pump Off Command 

214 

7.7.36 

Rotor Brake Command Signal 

215 

7.7.37 

Deleted 

216 

7.7.38 

Rotor Brake Unlocked Signal 

217 
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7.7.39 

Generator Field Enable Signal 

218 

7.7.40 

Generator Output Signal 

219 

7.7.41 

Utility Power Status Signal 

220 

7.7.42 

Bus Tie Contactor Open Signal 

221 

7.7.43 

Sync. Enable Signal 

222 

7.7.44 

Bus Tie Disconnect Command Signal 

223 

7.7.45 

Remote RS 232 Signal 

224 

7.7.46 

Local RS 232 Signal 

225 

7.7.47 

Ground Intrusion Signal 

226 

7.7.48 

Deleted , _ . 

227 

7.7.49 

NCU Temp. Low Signal 

228 

7.7.50 ' 

Yaw Accumulator Precharge Low Signal 

229 

7.7.51 

Yaw Oil Level Low Signal 

230 

7.7.52 

Yaw Oil Pressure Low Signal 

231 

7.7.53 

Deleted 

232 

7.7.54 

Deleted 

233 

7.7.55 

Yaw Oil Temp. High Signal 

234 

7.7.56 

Yaw Oil Pump On Signal 

235 

7.7.57 

Yaw Oil Pump Off Signal 

236 

7.7.58 

Yaw Left Command Signal 

237 

7.7.59 

Yaw Right Command Signal 

238 

7.7.60 

Deleted 

239 

7.7.61 

Fail Safe Yaw Hyd. Pump Off Command 

240 

7.7.62 

NCU Temperature Low Signal 

241 

7.7.63 

No. 1 Wind Speed Signal 

242 

7.7.64 

No. 2 Wind Speed Signal 

243 

7.7.65 

No. 1 Direction Signal 

244 

7.7.66 

No. 2 Direction Signal 

245 

7.7.67 

Fail Safe Generator Bearing Overtemp. 

246 

7.7.68 

Fail Safe Enable Signal 

247 

7.7.69 

Fail Safe Emergency Acc. Pressure 
Low Signal 

248 

7.7.70 

Fail Safe Pitch Accum. Signal 

249 

7.7.71 

Fail Safe Pitch Hyd. Pump Off Command 

250 

7.7.72 

Fail Safe Bearing Temp. #1 & #2 Signal 

251 

7.7.73 

Fail Safe Vibration #1 & #2 Signal 

252 

7.7.74 

Fail Safe Gearbox Oil Pressure Signal 

253 
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7.7.75 


Fail Safe Gearbox Temp. High Signal 

254 

7.7.76 


Deleted 

255 

7.7.77 


Fail Safe Rotor Brake Command Signal 

256 

7.7.78 


Fail Safe Overspeed 

257 

7.7.79 


Test Van Ready Signal 

258 
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SUBSYSTEM 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

SHELL STRUCTURE 


ROTOR 


FUNCTION OF COMPONE NT 

CARRY SHEAR AND BENDING LOADS TO BLADE ATTACHMENT AT HUB 


PAGE 1 

FMEANO A. 1.1 



FA V RE ^mft E M IN TENSION SKIN WELD. CAUSES LOSS OF PORTION OF 


BLADE IF CRACK IS UNDECTECTED. 


MAY CAUSE CHANGE IN BLADE STIFFNESS AND IN TURN INCREASE 


VIBRATION. 


2. ICE ACCUMULATIONS COULD SEPARATE FROM ROTOR AND STRIKE PEOPLE 


OR ANIMALS IF DETECTION SYSTEM FAILS 


APPLICABLE 
OPERATING MODES 




FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
TWEEN FA1LU 
(YEARS! 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL CATASTROPHIC 

III IV 



FAILURE DETECTION METHODS 

i CRACK DETECTION SYSTEM. __ 

2. ICE DETECTORS ON BLADES. 

DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

1 IT IS POSSIBLE TO AVOID THIS FAILURE MODE BY USE OF A CRACK DETECTION SYSTEM. 
(INCORPORATED INTO SYSTEM) 


SAFE LIFE DESIGN OF THIS COMPONENT IS INTENDED TO AVOID THIS FAILURE MODE. 


* IF NOT DETECTED 


2. ICE DETECTORS ON BOTH BLADES PROVIDE REDUNDANCY. DETECTION CIRCUIT IS FAIL SAFE 


(I.E , OPEN OR SHORTED WIRE/CONNECTION RESULTS IN WTS SHUTDOWN). 



NAME J. NOBLE 


OPERATING MODES 


A SHUTDOWN 
B TRANSITION TO WARM UP 
C WARM-UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


DATE 8/15/7 


Rev. 10/25/7 
3/8/79 


78 K 6162-001 





























FUNCTION OF COMPONENT 

CARRY SHEAR 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

SPARS 


LOADS TO BLADE ATTACHMENT AT HUB. 




FAILURE MODES & EFFECTS 

1 


APPLICABLE 
OPERATING MOOES 



FAILURE FREQUENCY 

MEAN TIME 
.BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

failure 
MODE NO 

FAILURE 
MODE 
FREQ % 

COMPONENT 
F Al LURE RATE 

x, 10 6 PER HOUR 

MINIMAL 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 

i Crack Detection System 


2 Not directly observable - 

3 Change in blade stiffness may be detected by an accelerometer as increased vibration 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


CATASTROPHIC FAILURE OF THE BLADE St 
IT IS POSSIBLE TO AVOID MOuE I BY US 


SAFE LIFE DESIGN OF THIS COMPONENT _I.S_I.NTENDED_T 


* IF NOT DETECTED 


J. NOBLE 


date 8/15/78 


OPERATING MODES 



Rev. 

10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

3/8/79 

B 1 R ANSITI ON TO WARM UP 

E 

STANDBY 

H - TRANSITION TO FEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 - FEATHER 



78 K 6162-001 
















SUBSYSTEM 

ROTOR ASSY. 


FUNCTION OF COMPONENT 


MOD 2 Failure Mode and Effects Analysis 


COMPONENT 

INBD JOINT 
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FMEANO 4.1.3 



'VWWDMjE TO CORROSION, FATIGUE, OR INTERNAL 


. DEFECT - LOSS OF BLADE CAUSES SEVERE ASYMMETRIC LOADING 


ON TEETER BEARING. DRIVE TRAIN, NACELLE & TOWER. 


2. FLANGE WELD FAILURE DUE TO INCLUSION. FATIGUE CORROSION OR OVER- 


LOAD - LOSS OF BLADE CAUSES SEVERE ASYMMETRIC 


TEETER BEARING. DRIVE TRAIN. NACELLE & TOWER. 


APPLICABLE 
OPERATING MODES 


F. G. H 



F, G, H 



FAILURE FREQUENCY 


failure 

MODE NO 


COMPONENT 
FAILURE RATE 




FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 

MINIMAL 

MARGINAL 

critical! 

CATASTROPHIC 

(YEARS) 

1 

II 

Ill J 

1 

IV 



FAILURE DETECTION METHODS 

i VISUAL INSPECTION (BOLTS MISSING - CRACKS IN WELD 


2 CHANGE IN NATURAL FREQUENCY (OR STIFFNESS) OF ROTOR ASSY. 


3 INCREASE IN VIBRATION , 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


if iii i i uiiuiiHi 


. USE OF MANY, SMALL DIAMETER HIGH QUALITY BOLTS GIVES REDUNDANT LOAD PA 






. LOW FATIGUE ALLOWABLES SHOULD PRECLUDE FAILURE DUE TO MOMENTARY OVERLOAD. 


5. SAFE LIFE DESIGN OF THESE COMPONENTS IS INTENDED TO AVOID FATIGUE FAILURES. 


JOINT FATIGUE TEST TO ESTABLISH FATIGUE ALLOWABLES 


' IF NOT DETECTED 



A1 Falco 


OPERATING MODES 


Rev. 10/25/78 

A SHUTDOWN 
8 TRANSITION TO WARM UP 
C WARM UP 

D - TRANSITI ON TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 

G- OPERATE 

H - TRANSITION TO FEATHER 
1 FEATHER 





























MOD-2 Failure'Mode and Effects Analysis 


SUBSYSTEM COMPONENT 

ROTOR _ PIVOT SPINDLE 

FUNCTION OF COMPONENT 

PROVIDE CO NTROL AXIS AND STRUCTURAL RESTRAINT FOR CONTR OL TIP. 


PAGE 4 

fmeano 4.1.4 



FAILURE MODES & EFFECTS 


IMBALANCE & SHUTD 


APPLICABLE 
OPERATING MODES 



FAILURE I COMPONENT MEANTIME 

FAILURE RATE BETWEEN FAILURE MINIMAL 
v 1 'n ® pfq unun (YEARS) I 


FAILURE SEVERITY 


MARGINAL, 

II 




FAILURE DETECTION METHODS 

i OBSERVABLE 


2 OBSERVABLE 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 



date 8/15/78 


OPERATING MODES 



Rev. 

10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 


B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

i 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 





























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM i 

HUB 

COMPONENT 

HUB 
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FMEANO 4.2 

FUNCTION OF COMPONENT 

ATTACHES ROTOR BLADE TO TEETER BEARING 



failuremod^s ajEFf ects i ke _ L0CALIZED PAINT damage. FAY SEAL 


APPLICABLE 
OPERATING MODES 


PROTECTED BY CONSIDERABLE METAL -METAL CON TACT 


HAIL - OVERALL PAINT DAMAGE - MOST SEVERE ON LEADING EDGE 


SNIPER - LOCALIZED PAINT DAMAGE 


INTERNAL MOISTURE BUILDUP - ACCELERATES CORROSION 


LARGE AMOUNT COULD FREEZE AND CAUSE UNBALANCE 



FAILURE FREQUENCY 

MEANTIME 
BETWEEN FAILURE 
(YEARS) 

1 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 
— 

FAILURE RATE 
x ICf 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

CRITICAL 

III 

CATASTROPHIC 

IV 



failure detection methods 


1 , 2 and 3: VISUAL FOR PAINT DAMAGE & RESULTING CORROSION 


INTERNAL MOISTURE DETECTION SYSTEM 




imasMi 





FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 

4 MOISTURE BUILDUP IS MINIMIZED BY PROVIDING VENTS AT OUTBD. END AND 


ALLOWING CENTRIFUGAL FORCE TO FORCE THE WATER OUT. 


CONTROL SYSTEM WILL MINIMIZE CORROSION 


CORROSION 


1,2,3 NORMAL MAINTENANCE PAINTING SHOULD PREVENT ANY MAJOR DAMAGE DUE TO 


LOCALIZED PAINT REMOVAL. 


WTS INSPECTION FOLLOWING EXTREME WEATHER CONDITIONS. 



name AL FALCO 


date 8/6/78 


OPERATING MODES 



Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K 6162-001 REV 1 





































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

HUB 

HUB 


FUNCTION OF COMPONENT 

ATTACHES ROTOR BLAOE TO TEETER BEARING 



FAILURE MODES & EFFECTS 

1 INBD. OF STA. 60: -HUB FAILURE FROMFATIGUE CRACK PROPAGATION 


APPLICABLE 

OPERATING-MODES 


F, G, iH 


F,G,H , 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 
MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
TWEEN FAILI 
(YEARS) 


MINIMAL 

I 



rawiMMiMaaiiiWh'i 


FAILURE DETECTION METHODS 

i 71 " 


CHANGE IN FREQUENCY OF ROTOR ASSY. 


INCREASE IN VIBRATION - - 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


,2 SAFE LIFE DESIGN IS INTENDED TO AVOID FATIGUE FAILURES 



AL FALCO 


date 8/ 6/78 


OPERATING MODES 


- 

Rev. 10/25/78 

A SHUTDOWN 

D 

TRANS1TI ON TO STANDBY 

G OPERATE 

8 TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER- 


78 K 6162-001 
























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

HUB 

HUB 


FUNCTION OF COMPONENT 

ATTACHES ROTOR BLADE TO TEETER BEARING 



FAILURE MODES & EFFECTS 


APPLICABLE 
OPERATING MODES 


BUCKLING OF COMPRESSION SKINS DUE TO OVERLOAD (SEVERE SNOW, ICE A, F, G 


&/0R HURRICANE LOADS) RESULTING IN COLLAPSE OF BLADE AND WTS SHUT- 


DOWN INITIATED BY VIBRATION DETECTION SYSTEM AFTER STARTUP. 



FAILURE FREQUENCY 

failure 

MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x (O' 6 PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL CATASTROPHIC 

III IV 



FAILURE DETECTION METHODS 


1 VIBRATION PICK-UP MOUNTED ON LOW SPEED SHAFT FRONT BEARING. 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

ESTABLISHMENT OF CONSERVATIVE ENVIRONMENTAL OPERATING RANGE TO MINIMIZE RISK OF 


THIS FAILURE MODE 



OPERATING MODES 



Rev. 10/25/78 

A SHUTDOWN 

0 

TRANSITION TO STANCBY 

G OPERATE 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 

































MOD-2. Failure Mode and Effects Analysis 


SUBSYSTEM 

PITCH CHANGE MECHANISM 

COMPONENT 

ACTUATORS 

PAGE 8 

FMEANO 4.3. 1 . I 

FUNCTION OF COMPONENT 



POSITION THE VARIABLE PITCH 

PORTION OF THE, WIND TURBINE ROTOR BLADE 



failure modes a effects INTERNflL LE ftK -.REDUCES RATE OF MOTION, ACTUAT 


CREEPS UNDER LOAD, HEATS FLUID. 


2 EXTERNAL LEAK. DISSIPATES SYSTEM FLUID 


3 JAMMED - UNABLE TO CONTROL BLADE PITCH ON ONE BLADE ONLY 


. ROD-END SEPARATION - UNABLE TO CONTROL BLADE PITCH, ONE BLADE 


FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 
MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

1,2 

.95 

70 

3 

.04 

70 


APPLICABLE 
OPERATING MODES 

F, 

G, 

H 

F, 

G, 

H 

F, 

G, 

H 

F, 

I 

G, 

H 


FAILURE SEVERITY 


BETWEEN FAILURE MINIMAL MARGINAL 



FAILURE DETECTION METHODS 


, POOR SPEED CONTROL, OVERHEAT WARNING, MANUAL TEST 


2 VISUAL, LOW FLUID QUANTITY ALARM 


3 


GNALS FR 


tia«MaiJiI^llWJdaaiWiilLVJaBMiwaMiiiaMi]MiK'iaMi;ia;»iijr 



FAILURE CAUSE AND CORRECTIVE ACTION (I F APP LICABLE) 

SYSTEM WILL- SHUT DOWN. 


. SUGGEST MANUAL TEST TO ALLOW MAINTENANCE PERSONNEL TO DETECT INTERNALLY 


LEAKY ACTUATOR. BY DISABLING FEEDBACK, ABSOLUTE RATE OF CHANGE DIFFERENCES 


CAN BE DETECTED AND ACTUATOR CAN BE REPLACED PRIOR TO FAILURE. 


WILL ALIGN ITSELF 


STREAMLINE TO THE WIND. 


* IF UNDETECTED DURING INSPECTIONS. 



name D. W. KING 


date 8/9/78 


OPERATING MODES 

• 

Rev. 

10/25/78 

A -SHUTDOWN 

D TRANSITION TO STANDBY 

G - OPERATE 


B TRANSITION TO WARM UP 

E STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F - TRANSITION TO OPERATE 

1 FEATHER 













































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

PITCH CHANGE MECHANISM 


COMPONENT 


RESERVOIR 
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FMEANO 4.3.1 .2 


FUNCTION OF COMPONENT 

CONTAINS A SUPPLY OF HYDRAULIC FLUID FOR THE PITCH CONTROL HYDRAULIC SYSTEM. 



TUMBLES - f> 


2 ROTARY SEAL FAILS - AIR SLOWLY ENTERS HYDRAULIC SYSTEM, &/0R OIL 


LEAKS FROM BREATHER 


3 LIQUID LEVEL GAUGE FAILS - PRODUCES EMPTY INDICATION PRODUCES 


FALSE INDICATION - £> 


4 EXTERNAL JOINTS LEAKS - EVENTUALLY PRODUCES LOW LEVEL ALARM 


SPREADS OIL IN AREA OF LOW SPEED SHAFT 


APPLICABLE 
OPE HATING MODES 


F.G.H, & I 


F, G,H, & I 


F.G.H, & I 


F.G.H.&I 


FAILURE FREQUENCY 


FAILURE SEVERITY 


r.^ UBE F Al LURE RATE 1'^, 


failure mode ^ between fail 

MODE NO FREQ % x 1 0'” PER HOUR (YEARS) 


BETWEEN FAILURE MINIMAL MARGINAL CRITICAL CATASTROPHIC 



FAILURE DETECTION METHODS 


i LOW LEVEL ALARM & VISUAL DETECTION OF OIL IN BREATHER WTS SHUT DOWNS. 


2,4 LOS SYSTEM PRESSURE &/0R OIL IN BREATHER WTS SHUTS DOWN 


3 WTS SHUTS DOWN. 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

> LIQUID LEVEL INDICATOR PRODUCES INTERMITTENT LOW LEVEL ALARM, AIR ENTERS PUMP 
INLET, OIL ESCAPES FROM BREATHER. ~ ' ~ 


£> IF INDICATOR INCORRECTLY SHOWS A SATISFACTORY OIL LEVEL WHEN THE OIL LEVEL IS 


UNSATISFACTORY, THE OIL TEMPERATURE OR PRESSURE DETECTION SYSTEM WILL SHUT THE 


WTS DOWN. 

DEVELOPMENTAL TESTS TO BE CONDUCTED TO VERIFY RESERVOIR PERFORMANCE. 



date 7 / 20/8 


OPERATING MODES 



Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

8 TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM-UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K-6162-001 REV 1 





































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

PITCH CHANGE MECHANISM 

COMPONENT 

ACCUMULATORS 
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FMEANO '4.3.1 .3 

FUNCTION OF COMPONENT 

1. STORE HYDRAULIC ENERGY FOR FEATHFRING 


2. STORE ENERGY FOR SHORT TERM PEAK DEMANDS DURING NORMAL OPERATION 


failure modes & effects ^ LEAKS ^ HY Q RA y L j c S y S TEM - SPRING RATE 


OF SYSTEM REDUCED, EVENTUAL LOSS OF ACCUMULATOR CAPABILITY. 


2 GAS LEAKS EXTERNALLY - LOSS OF ACCUMULATOR CAPABILITY. 


3 OIL LEAKS EXTERNALLY - DISSIPATES OIL FROM. SYSTEM 



APPLICABLE 

OPERATING MODES 

F, 

G, 

H, & I 

' G, 

H, 

& I 

A, 

F, 

G, H, & I 



FAILURE FREQUENCY 



failure 
MODE 
FREQ % 

FAILURE rate 
x Uf 6 PER HOUR 

30 

42 

20 

42 

30 

42 




MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE SEVERITY 

MINIMAL 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



X IF UNDET 


X IF UNDET 



FAILURE DETECTION METHODS 


i LOW ACCUMULATOR GAS PRESSURE WHEN HYDRAULICS DE-PRESSURI ZED-DISABLES START-UP ABILITY, 


2 GAS PRESSURE NOT EQUAL TO HYDRAULIC PRESSURE: SYSTEM SHUTS DOWN. 


3 LOSS OF HYDRAULIC PRESSURE AND VISUAL INSPECTION 


FAILURE CAUSE AND CORRECTIVE ACTION (I F APP LICABLE) 



OPERATING MODES 



Rev. 

10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 


B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 








































MOD-2 Failure Mode and' Effects Analysis 


SUBSYSTEM 

PITCH CHANGE MECHANISM 

COMPONENT 

START-STOP VALVES 

PAGE i 

4 3 1 4 1 

FMEANO j . 1 ' 

FUNCTION OF COMPONENT 

APPLIES HYDRAULIC PRESSURE TO SERVO VALVES FOR NORMAL OPERATION 



failure frequency 


FAILURE SEVERITY 



failure 

MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

90 

41 

10 

41 

100 

.003 


MEAN TIME 
BETWEEN FAILURE 
IYEARS) 


MINIMAL 

I 


CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 

1 | 


2 PERIODIC CHECK FOR VALVE OPERATION. 


3 UNABLE TO IMPLEMENT NORMAL SHUTDOWN, BUT NO PROBLEM. 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE! 


&>- TWO VALVES PROVIDED TO INCREASE RELIABILITY. 



OPERATING MODES 



Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G- OPERATE 

8 - TRANSITION TO WARM-UP 

E 

STANDBY 

H - TRANSITION TO FEATHER 

C- WARM-UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

PITCH CHANGE MECHANISM 

SYSTEM RELIEF VALVE 
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FMEA NO 4. 3. 1 .4. 2 


FUNCTION OF COMPONENT 



F A NTERNAtLY - UNABLE TO MAINTAIN SYSTEM PRESSURE, HEATS' FLUID 


2 LEAKS EXTERNALLY - DISSIPATES SYSTEM FLUID.- MAKES A MESS 


APPLICABLE 
OPERATING MODES 


E.F.G.H 


e.f.g’.h 



FAILURE FREQUENCY 

failure 
MODE NO 

failure 

MODE 
FREQ % 

COMPONENT 
FAJLURE RATE 

x 10 6 PER HOUR 

1 

40 

17 

2 

isHSilt 

17 

3 

sa 

17 


FAILURE SEVERITY 


MEAN TIME 



CRITICAL 

III 

CATASTROPHIC 

IV 

X IF iIndetected 


X IF UNDETECTED 


FAILURE DETECTION METHODS 

_! LQWL PRESSURE ALARM, OR OVERHEAT ALARM 

2 LOW FLUID QUANTITY ALARM 


3 NO DETECTION METHOD EXCEPT BENCH TEST - CONSTITUTES DOUBLE FAILURE / 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


t> PROBABILITY OF DOUBLE FAILURE IS. NEGLIGIBLE 



OPERATING MODES 



Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G- OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H - TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1- FEATHER ? 

I 

































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

PITCH CHANGE MECHANISM 

COMPONENT 

TEETER BRAKE VALVE 
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FMEANO 4.3.1 .4.3 

FUNCTION OF COMPONENT 



FAILURE MODES & EFFECTS 

1 FAILS TO OPEN-TEETER BRAKE SLIPS, BRAKE LINING & PLATE WEARS. 


APPLICABLE 
OPERATING MODES 


2 FAILS TO CLOSE-TEETER BRAKE RELEASES TOO EARLY ON START-UP 



FAILURE FREQUENCY 

failure 
MODE NO 

i 

FAILURE 
MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

i 

90 

21 

2 

10 

21 





FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL CATASTROPHIC 

III IV 



FAILURE DETECTION METHODS 

1 BRAKE SQUEAKS DURING NORMAL OPERATION, VISUAL INSPECTION 


2 MANUAL INSPECTION. 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


HYDRAULIC PRESSURE SWITCH ADDED TO INDICATE 


BRAKE RELEASE STATUS. 



OPERATING MODES 



Rev. 10/25/71 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K 6162-001 

























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

’ITCH CHANGE MECHANISM 


FUNCTION OF COMPONENT 

CONTROLS PITCH CHANGE ACTUATOR 


COMPONENT 


SERVO VALVE 



FAILURE MODES & EFFECTS 


MIIAfll M M Sill v 1 !■ llWtili u lu ril i 1 RM9I 

WA R] HI PlMflllM 1 1 

MOTION. 

2 INTERNAL LEAKAGE - HEATS FLUID, 

REDUCES RATE OF PITCH CHANGE. 


3 JAMS - ONE BLADE TIP WILL NOT MOVE 


4 EXTERNAL LEAKAGE - DEPLETES SUPPLY IF NOT DETECTED. 


FAILURE FREQUENCY 

failure component meantime 

FAILURE MODE FAILURE RATE BETWEEN FAILI 

MODE NO FREQ % x , 0 6 PER HOUR (YEARS) 


74 


74 


APPLICABLE 
OPERATING MODES 


F,G H 


F.G.H 


F,G,H 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV" 




FAILURE DETECTION METHODS 

1 I ' - - 




2 OVERHEAT WARNING 


3 SAME AS 1 ABOVE.- 4. FLUID LEVEL SENSOR. 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


FOR 1, 2, 3, 4 EMERGENCY STOP IS INITIATED WHICH BY-PASSES SERVO VALVE. 



OPERATING MODES 


DATE 8/9/78 


Rev. 10/25/78 


A SHUTDOWN 

B - TRANSITION TO WARM-UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78-K 6162-001 





































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

TCH CHANGE MECHANISM 

COMPONENT 

SHUTTLE VALVE 

PAGE 15 

FMEANO 4. 3. I. 4. 5 

FUNCTION OF COMPONENT 

DISABLES SERVO VALVE & APPLIES BLADE FEATHERING PRESSURE UPON LOSS OF 

NORMAL HYDRAULIC 



FA, «3«E WHEN PRESSURIZED - UNABLE TO CONTROL ONE BLADE. 


TIP, BYPASSES FLUID 


2 FAILS TO SHUTTLE WHEN DE-PRESSURIZED- UNABLE TO FEATHER ONE 


BLADE TIP 


3 LEAKS 


APP LICABLE 
OPERATING MODES 


F,G H 


H,I 


f.g.h. 



FAILURE FREQUENCY 


failure 

MODE NO 


COMPONENT 


«10” PER HOUR 



MEAN TIME 


(YEARS) 


FAILURE SEVERITY 

MINIMAL 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 

1 UNABLE TO UN-FEATHER BLADE TIP ON START COMMAND 


LOW PRESSURE ALARM, OVERTEMP ALARM 

2 NO PRESSURE CHANGE IN FEATHERING ACCUMULATOR ON "FEATHER" COMMAND. SLOW FEATHERING 


UK HU rtHinC.KII'lLi. 

3 INSPECTION DURING PREVENTATIVE MAINTENANCE PERIODS. 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

1,2. SHUTDOWN CAN BE ACCOMPLISHED BY FEATHERING ONE BLADE. 



OPERATING MODES 



Rev. 10/25/78 

A SHUTDOWN • 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H - TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 



























MOD-2 Failure Mode and Effects Analysis 



CONTROL ACTUATORS AND FEATHER LATCHES 




FAILURE MODES& EFFECTS 


RACEWAY AND/OR BLADE SECTIONS 




APPLICABLE 

operating modes 



FAILURE DETECTION METHODS 

2 VISUAL AND OIL LEVEL INDICATOR 


3 SLOW FEATHERING RESPONSE PICKED UP BY MICRO PROCESSOR. 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


wig | |im*u| jiiflFi* | fiM rjlJ i yti rii ; ■w[ii| j | >■ iiwM i g m i ■; i?i ■■riiwiijMi ariwti 


OIL. ELECTRICAL COMPONENTS SHOULD BE RESISTANT TO OIL. FLUID TRAPS IN BLADE SHOULD 



* CRITICAL IF LEVEL OR PRESSURE SENSORS INITIATE SHUTDOWN 
PRIOR TO LEAK DETECTION BY MAINTENANCE PERSONNEL. 



OPERATING MODES 


date 7/26/78 


Rev. 10/25/78 


A SHUTDOWN 

B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 

H TRANSITION TO FEATHER 
I - FEATHER 


78 K 6162-001 






















MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

PITCH CHANGE MECHANISM 

FILTERS 


FUNCTION OF COMPONENT 

REMOVES SOLID PARTICLES FROM HYDRAULIC FLUID. 



FAILURE MODES & EFFECTS 




LEAKS EXTERNALLY - DISSIPATES SYSTEM 


FLUID MAKES A MESS 


EXCESSIVE PRESSURE DROP - £> 


DUE TO FILTER CLOGGING 


APPLICABLE 

OPERATING MODES 

F, 

G H 

F, 

G H _ 

F, 

G, H 



FAILURE FREQUENCY 


COMPONENT MEAN TIME 

A1 LURE RATE BETWEEN FAILU 

10 6 PER HOUR (YEARS) 



FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 


CAN 


FAILURE DETECTION METHODS 



ELY ESTIMATED 


, PERIODIC FLUID SAMPLING & FILTER ELEMENT REPLACEMENT 


, LOW FLUID QUANTITY ALARM- VISUAL INSPECTION 


3 DIFFERENTIAL PRESSURE SWITCHES. WTS WILL STOP IF EXCESSIVE PRESSURE DROP IS INDICATED 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

j>- INCREASES WEAR RATE OF PUMP, MAY CAUSE MALFUNCTION OF VALVES. 


si i ■ 1 1 n a: ni ii w rii 


MAY ALSO REDUCE PITCH CHANGE RATES WHICH WOULD BE DETECTED BY THE MICROPROCESSOR. 


* IF UNDETECTED BY MAINTENANCE PERSONNEL 



name D. W. KING 


date 8/9/78 


OPERATING MODES 



Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G - OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM-UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 






























SUBSYSTEM 




MOD-2 Failure Mode and Effects Analysis 


COMPONENT 


lulllflr<9!4llut!J 


FMEANO 4.3.1 .7&8 


FUNCTION OF COMPONENT 

PROVIDE HYDRAIII If. POWER FOR OPERATION OF PI TCH CHANGE MECHANISM 



^^W^M^OR N0 PRESSURE - PRODUCES LOW PRESSURE ALARM 


WTS SHUTDOWN 


2 LOW HYDRAULIC FLOW - REDUCES PITCH CHANGE RATES, MOMENTARY LOW 


PRESSURE ALARM - WTS SHUTDOWN 


3 EXCESSIVE HYDRAULIC PRESSURE - OVERHEATS HYDRAULIC FLUID. - WTS 


SHUTDOWN 


4 LEAKS - EXTERNAL 


APPLICABLE 
OPERATING MODES 


F.G.H 


F.G.H 

F.G.H 


F G H 


FAILURE FREQUENCY 


. 

FAILURE SEVERITY ' 

- 

failure 
MODE NO 

failure 

MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

mean time 

BETWEEN FAILURE 
' (YEARS) 

MINIMAL 

MARGINAL 
II ' 

CRITICAL 

III 

CATASTROPHIC 
. IV 



FAILURE DETECTION METHODS 

4 30 38 10.0 

i LOW PRESSURE ALARM . WTS SHUTDOWN 


X 

X* 


2 LOW PRESSURE ALARM -- WTS SHUTDOWN 

1 




3 OVERHEAT ALARM - WTS SHUTDOWN 




- 

DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


•- 


- 

* IF UNDETECTED 

— 



- 



OPERATING MODES 


Rev. 10/25/78 

A SHUTDOWN 

8 TRANSITION TO WARM-UP 
C WARM UP 

D - TRANSITI ON TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 

G OPERATE 

H - TRANSITION TO FEATHER 
1 FEATHER 









































SUbSYSTCM 

ROTOR - EPS 

FUNCTION OF COMPONENT 


MOD 2 Failure Mode and Effects Analysis 


component CONTROL CABLE 
TO TIP NO 1 ACTUATOR 


PAGE I 
F ME A NO 


4.3.1.10.' 


FUNC Ur t- ui\irw«C it* l 

PROVIDE A PATH FOR THE FLOW OF COMMANDS AND OPERATIONAL DATA FROM THE TEETER BEARING 
- FLEXIBLE CABLE ASSEMBLy’Yo THE TIP NO. 1 ACTUATOR 


failure^ix-s^ eff^ts - s open C1 rcul te( j . fj 0 path for a specific command 
or" dcftaTo or trdnTTip"'N6T'r'ac^fuator ^ lip is not corTfrOTTaBTeT" 


2 Cable is partially short circuited: False commands may result or 

faTse data may be > transmitted, lip No. 1 does not position 

peoper-Ty- or higfrresrsta nee: — — — 

? — C ab l e-i s-pa r-ti-a4-ly-gi=GU nded- / — Lo^s-of— data -or~ c omm and-f-unc ti-o a - t o- 
.Tip No. 1. Tip No. 1 does not position properly. 


FAILUFIE r REOUENCY 

failure component meantime 

MODE FAILURE RATE BETWEEN FAILURE 


APPLICABLE 
OPERATING Ml'ES 


f.g.h 


F.G.H 


f.g.h 



x 10 b PER HOUR 



(YEARS) 


FAILURE SEVERITY 


MARGINAL CRITICAL CATASTF'_=HIC 

II III IV 



FAILURE DETECTION METHODS 


> J 

i - 3 Tip No. 1 data di splayed on C RT terminal indicates that Commands are not executed. 
WTS SHUTS DOWN DUE TO DIFFERENTIAL IN THE TWO PITCH 


POSITION SIGNALS. 



jPERATING MODES 


A SHUTDOWN 
B TRANSITION TO WARM-UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G. TRUSK / h. Roth date 8/17/78 


Rev. 10/3/7 
G OPERATE Rev. 10/25/7 

H TRANSITION TO FEATHER 
I FEATHER 


78 K 6162-001 


















I 

MOD 2 Failure Mode and Effects Analysis 


subsystem 1 component CONTROL CABLE TO rwut^g 

ROTOR - EPS I TIP NO 2 ACTUATOR [emeano 4 ~ 3 

FUNCTION OF COMPONENT 

ppfwrnp a PATH FOR THF FI OW OF COMMANDS AND OPERATIONAL DATA FROM THE TEETER BEARING 
FLEXIBLE CABLE ASSEMBLY TO THE TIP NO. 2 ACTUATOR 


F ME A NO 


4.3.1.10. 


FAILURE MODES & EFFECTS 

1 Ulirn m rahlp is nppn rirc uit.pd: No_pa t h f or a. spe cific 

command or data to or from tip No. 2 actuator, tip is not control 


or false data may be transmitted, tip No. 2 does not position 


properly . 


APPLICABLE 

o pe rating m : o e s 
F.G.H 


F ,G,H 


to tip No. ,2 does not position properly. 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

1 

20 

.04 

2 

10 


3 

70 

.04 


MEAN TIME 
TWEEN FAIL 
(YEARS) 


- 

FAILURE SEVERITY 


MINIMAL 

MARGINAL 

CRITICAL 

CATASTR.PHIC 



FAILURE DETECTION METHODS 

t - 3 Tip No. 2 data displayed on CRT terminal indicates that commands are not 
executed. 

WTS shuts down due to differential of pitch position signals. 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

1-3 Conservative mechanical design of cable will reduce 


occurrence of these failures. 

Failsafe shutdown initiated' if tip control siqnals are not executed. 


NAME G. TRUSK / H. Roth 


OPERATING MODES 


A SHUTDOWN 
B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


date 8/17/78 


-Rev. 10/5/78 
G OPERATE ^ eV ' 10/25/78 

H TRANSITION TO FEATHER 
l-FEATHER 


78 K 6162-001 










MOD 2 Failure Mode and Effects Analysis 


SUdSYSTE M 

COMPONENT 

PAGE 21 

.-ROTOR — E£S 

TIP NO. 1 BONDING STRAP 

FME A NO 4.3.1.10.. 

FUNCTION OF co\ ponent 

PROVIDE A PATH FOR 

THE FLOW OF LIGHTNING CURRENT FROM THE VARIABLE 

PITCH TIP OF THE 

l ROTOR TO THE FIXED 

PITCH PORTION OF THE BLADE 



FAILUHE MODCS& EFFECTS 

i Bon ding strap i s open c i r cuit ed , 


applicable 
OPERATING M'.LES 


2 Bondi nq strap has high resistance d 


3 Bo nding strap has htqlLxeslstance due to poor bond (-. nnnprtinn , 




failure frequency 

failure component meantime 

FAILURE MODE FAILURE RATE BETWEEN FAILURE 

MODE NO r REQ % x i 0 6 PER HOUR (YEARS) 


MINIMAL 

I 


FAILURE SEVERITY 


MARGINAL CRITICAL CATASTF_=HIC 

II III IV 



FAILURE DETECTION METHODS 

1 - 3 Pemodic .inspection. 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

1-3 When lightning strikes the variable pitch tip of the rotor the resultant extremely 
Tfigh current will follow the path of least resistance to ground, it an infinite 




■ n iiaii » I M i< zti i tm ? ■ ■ ■ i 


possibly flow through the tip pitch bearing or hydraulic lines causing local 
Tivertrearting, pitting or welding of parts. Redundant bonding straps will be 


iiifli ITi In 1 TCKi 4 V: lil 


fatigue failures. 

*1 Physica l dama ge could be fatal at a manned site due to falling parts, or 
molten metal. Probability of site being manned in a thunder st 0 rm and also 

^having failure of both straps is negligible. O&M manual will specify that 


no one is allowed in nacelle during lightning storms. 


name g. TRUSK / H . Roth 


OPERATING MODES 


A SHUTDOWN 
B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
£ STANDBY 

F TRANSITION TO OPERATE 


DATE8/17/78 


REV. 10/5/78 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78 K 6162-001 



















SUBSYSTEM 


MOD 2, Failure Mode and Effects Analysis 


COMPONENT 

TIP NO. 2 BONDING STRAP 


PAGE 22 

fMEANO 4.3.1 .10.' 


ROTOR - EPS | I lr HU. i. BUlNUHNb 5 1 krh cmeano 4.3.1.10 

FUNCTION OF COMPONENT 

PRO VIDE A PAT H FOR THE FLO W OF L IG HTNING C URRENT FROM THE V ARIABLE PITCH TIP OF THE ROTOR 
TO THE FIXED PITCH PORTION OF THE BLADE. 


FAILURE MODES & EFFECTS 

i Bondin g str ap is open ci rcu ited. 


i Bonding strap has high resistance due to fr aying. 

3 Bond in g strap has hi gh re sis tance sue to p oor bond co nnection. 



FAILURE FREQUENCY 

failure component meantime 

FAILURE MODE FAILURE RATE BETWEEN FAILURE 

MODE NO FREQ. % * 10 6 PER HOUR (YEARSI 

2.8 x 10 3 


1.4 x 10 3 


FAILURE DETECTION METHODS 

t - 3 Periodic inspection^ . 
2 


FAIL URE SEVERITY 


MINIMAL MARGINAL | CRITICAL | CATASTF1 = HIC 

I II 




DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


extremely high current wi 1,1 follow the path of least resistance to ground. If 


causing local heating, pitting, or welding of parts. 

Redundant 


11- be used to preclude this failure mode, straps will 

be designe 

d to minimize strap fatigue failures. 


for s a fety note. 


date 8/17/78 


jPERATING MODES 



Rev. 10/5/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K 6167-001 



















SUBSYSTEM 


iHiiniri 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

AN ISM 




page 23 
FMEANO 4.3.2 


FUNCTION OF COMPONENT 

TO HOLD BLADE TIP IN THE FEATHERED POSITION 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 

1 


2 TIP DOES NOT RESPOND TO COMMAND - START-UP NOT POSSIBLE. 




UNLOCKED. 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 





A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G 

OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H 

- TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

i 

FEATHER 























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

ROTOR , 


FUNCTION OF COMPONENT 

ATTACHEMENT OF ACTUATOR TO BLADE AND TIP. 


COMPONENT 

FASTENERS, ROD ENDS 




FAILURE FREQUENCY , 


FAILURE SEVERITY 

failure 
MODE NO 

failure 

MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

MINIMAL 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 

, INSPECTION, TIP POSITION INDICATOR. 


, INSPECTION, TIP POSITION INDICATOR., 


DISCUSSION AND CORRECTIVE ACTION {IF APPLICABLE) 


1. EXCESSIVE WEAR WILL BE INDICATED BY TIP POSITION MOVEMENT AT A FIXED COMMAND. 



date 8/15/78 


OPERATING MODES 



A SHUTDOWN 

D - TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP' 

E STANDBY 

H - TRANSITION TO FEATHER 

C WARM UP 

F TRANSITION TO OPERATE 

1 - FEATHER 


































SUBSYSTEM 


MOD 2 Failure Mode and Effects Analysis 


component( PART of |_ow SPEED SHAFT & PAGE 25 
SHAFT BEARINGS) fmeano 5.1.1 


DRIVE TRAIN 


FUNCTION OF COMPONENT 

TO TRANSMIT TORQUE FROM ROTOR TO THE QUILL SHAFT AND REACT ROTOR MOMENT (FROM OVERHUNG 


WEIGHT). 


FA ^ U 1oTe D nYe!tER CT S S HAFT OR SHAFT FLANGE JOINT - ROTOR COULD FALL OFF ope A rat'.ng 8 modes 


2 BROKEN QUILL SHAFT BULKHEAD JOINT - WOULD ALLOW ROTOR TO FREEWHEEL 


: - COULD CAUSE IMBALANCE AND BEARING 


3 DEFORMED 


AILURE 




FAILURE FREQUENCY 


FAILURE 
MODE NO 


COMPONENT MEANTIME 

FAILURE RATE BETWEEN FAILURE 
* in 6 ppn mdi in (YEARS) 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


, LOSS OF ROTOR CAUSES LOSS OF GENERATOR LOAD, INITIATES (ELECTRICAL) EMERGENCY SHUTDOWN 

AS'trntTTT'TR TES TO~DRTVE”GENERATOR 

LOSS OF GENERATOR RESULTS IN ACTIONS ABOVE (1) PLUS OVERSPEED OF ROTOR TRIGGERS 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

1. SAFE LIFE DESIGN 

INCIPIENT FAILURE DETECTION DEVICES NOT PRACTICAL. 

2. EMERGENCY SHUTDOWN PROCEDURE PREVENTS ROTOR OVERSPEED IN EXCESS OF DESIGN LIMITS. 



name ROLF LUTH 


date 8/7/8 


OPERATING MODES 





A SHUTDOWN 

D 

TRANSITI ON TO STANDBY 

G 

OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H 

TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 

FEATHER 


























FME A NO 


5.1.2 


MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT 

DRIVE TRAIN RADIAL BEARING (FLUID) 


FUNCTION OF COMPONENT 

TO SUPPORT LOW SPEED SHAFT BY DECREASING RUNNING FRICTIONS AND TO REACT ROTOR MOMENT 


(FROM OVERTURNING ) ROTOR WEIGHT. 


FAILURE MODES & EFFECTS 


TEMPERATURE. 






BEARING FAILURE WHILE PARKED - INCREASED BREAKAWAY MOMENT LEADING 


DETERIORATED BEARING - INCREASED FRICTION AND TEMPERATURE 


APPLICABLE 
OPERATING MODES 


F, G, H 


ALL 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 
MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

* 10 6 PER HOUR 


MEAN TIME 
TWEEN FAILL1 
(YEARS) 


FAILURE SEVERITY 

MINIMAL 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 

1 --- 






THERE IS NO- INSTRUMENTATIONS THAT SENSES EXCESSIVE BREAKAWAY TORQUE, HOWEVER, ONCE 


IN MOTION FAILURE WOULD BE DETECTED PER FM(1) ABOVE 




DISCUSSION ANO CORRECTIVE ACTION (IF APPLICABLE) 



2. System will be designed to allow lubrication of bearing if stationary 


for extended periods. 



date 8/7/78 


OPERATING MODES 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G 

OPERATE 

8 TRANSITION TO WARM UP 

E 

STANDBY 

H 

TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 

FEATHER 
































'j MOD 2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

DRIVE TRAIN 1 

TEETER BEARING 


FUNCTION OF COMPONENT 


ACCOMODATES TEETER MOTION, TRANSMITS ROTOR TORQUE TO LOW SPEED SHAFT, SUPPORTS WEIGHT 
OF ROTOR, REACTS ROTOrI DRAG LOAD 


f a| lur^(^^^^|^ OF ELASTOMER - [£> \$> 


FAILURE OF BOND BETWEEN ELEASTOMER & METAL PARTS 


3 DETERIORATION OF ELASTOMER DUE TO. OIL, OZONE, OR LIGHTNING - 


PRIMARILY SURFACE EFFECTS, BUT MAY SHORTEN LIFE. 


APPLICABLE 
OPERATING MOLES 




failure frequency 


FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ. % 

COMPONENT 
FAILURE RATE 

x 10 3 * * 6 PER HOUR 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

1 

ESH 

22.8 

15 

2 


22.8 

15 

3 

Ejj 

22.8 

15 

FAILURE OETECTION METHODS 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 




i VISUAL 


2 VISUAL 


3 VISUAL 


DJSCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

R> MAY ALLOW EXCESSIVE DISPLACEMENT OF ROTOR DUE TO DEAD WEIGHT AND DRAG LOADS 




RESULTING IN INCREASED VIBRATION 


> FAILURE PROGRESSES VERY SLOWLY AND IS VISUALLY DETECTABLE. IF FAILURE IS FIRST 


DETECTED AT 35% OF LIFE, BEARING WILL PROBABLY COMPLETE 100% OF LIFE CYCLES SATIS- 


FACTORILY. 


> CORROSION OF METAL PARTS MAY ACCELERATE BOND FAILURE. 


PERIODIC INSPECTIONS REQUIRED. 



name D. W. KING 


date 7/19/78 


OPERATING MODES 




A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H - TRANSITI ON TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K 6162-001 


































MOD 2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

PAGE 28 

nRTVF TRAIN 

RADIAL/THRUST BEARING 

FMEANO 5.1 .4 

FUNCTION OF COMPONENT J 


^ SUPPORT LOW SPEED SHAFT BY DECREASING RUNNI NG FRICTIONS AND TO REACT ROTOR MOMENT 
(FROM OVERHUNG ROTOR WEIGHT) AND ROTOR THRUST 


FAILURE IV 

1 

10DES & EF 

ERATUREL 

F BEARING FAILURE WHILE IN MOTION CAUSES HIGH VIBRATIONS 

APPLICABLE 
>\NDOPE RATING MODES 

ANIL TEMP 

AND COULD CAUSE FAILURE OF RADIAL BEARING AND GEARB 

X 

o 



F. G. H. I 

* 8 FAILURE TO REACH THRUST. 

ALL 

?. RFARTNG FATI 1JRE WHTI F PARKFD - INCREASE^ BREAK-AWAY MOMENT LEADING 

» m FM M) ABOVE WHFN RROKFN 100SF. 

Al 1 

3- DETERIORATED RFARTNG - TNORFA^FD FRIOTTON, TFMPFRATIIRF AND VIBRATION 

4 CORROSION WHILE STATIONARY OVER EXTENDED PERIODS DUE TO OIL 


DRAINING OFF BEARING SURFACES 

FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

failure 
MODE NO 

failure 

mode 

FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 RER HOUR 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 

1 

55 

10.3 

20.2 



X 


2 » 4 


INCLUDED I 

N 1 AND 3 



X' 


3 

45 

10.3 

24.7 


X 




'Al LURE DETECTION METHODS 

TEMPERATURE AND VIBRATIONS SENSORS WOULD INITIATE EMERGENCY SHUTDOWN. THERE IS NO IN- 


STRUMENTATIONS THAT SENSES EXCESSIVE BREAKAWAY TORQUE, HOWEVER, ONCE IN MOTION FAILURE WOU 
2 BE DETECTED PER FM ABOVE. 


EXCESSIVE TEMPERATURE INITIATES EMERGENCY SHUTDOWN. 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


SYSTEM WILL BE DESIGNED TO ALLOW LUBRICATION OF BEARING IF STATIONARY FOR EXTENDED 


PERIODS. 


NAME R. LOTH 


DATE 8/ 7/ 78 


DERATING MODES 


A SHUTDOWN 
B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F - TRANSITION TO OPERATE 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78 K 6162-001 







MOD 2 Failure Mode and Effects Analysis 


SUBSYSTE M 

DRIVE TRAIN 


COMPONENT 

TEETER STOP 

page ?q 
c 5.1.5 

FME A NO. 

FUNCTION OF COMPONENT 

RESTRAIN TEETERING MOTION OF THE 

ROTOR WHEN THE TURBINE IS SHUT DOWN. 

LIMITS TEETER 

ANGLE. ■ 



- 


FAILURE MODES & EFFECTS I APPLICABLE 

i BRAKE FAILS TO RELEASE - BRAKE LINING & PLATE WILL WEAR OUT DUE , operating mcces 


TO SLIPPAGE. G 


BRAKE FAILS TO APPLY OR IS WORN OUT -ROTOR BANGS ON MOTION LIMIT 


MOTION STOP BUMPERS FAIL - EXCESSIVE TEETER ANGLE, MAY CONTACT 



A,B,C,D,E,F,H,I 


A,B,C,D,E,F,H,I 


G 


failure frequency 


failure severity 


failure component meantime 

failure mode failure rate between failure minimal marginal critical 

MODE NO FREQ % x 10 6 PER HOUR (YEARS) I II III 




FAILURE DETECTION METHODS 

4 75 

,-4 VISUAL INSPECTION 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

1. BRAKE WILl SLIP AND EVENTUALLY WEAR OUT. NO MAJOR DAMAGE RESULTS. 

RFQIITRFS- - RER.-LQGI.fL INSPECTION & -RFPJ Af. FM F NT O F W ORN BRAKF I INT N G. 
3,4 REQUIRES PERIODIC INSPECTION. 


OPERATING MODES 


A SHUTDOWN 
B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


D. U. KING 


DATE 7/18/71 


3/8/79 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78 K 6162-001 






















SUBSYSTEM 

DRIVE TRAIN - E 


FUNCTION OF COMPONENT 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

SLIP RINGS 


PAGE 30 

FMEANO 5.1 .6.1 




BETWEEN THE NACELLE AND THE DRIVE TRAIN 


failure mooes& t ef 6 fects ilur£s re$ult in lqss qf pQWER and/()r SI6NALSi all 


POWER AND SIGNAL LINES ARE ADDRESSED UNDER THEIR RESPECTIVE 


2 SUBSYSTEMS. - - - 


APPLICABLE 
OPERATING MOOES 


ALL 



FAILURE FREQUENCY 

failure 

MODE NO 

failure 

MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

ALL 

100 

37.6 


MEAN TIME 
BETWEEN FAILURE 
' (YEARS) 


FAILURE SEVERITY J> 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 




FAILURE DETECTION METHODS 

, o 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


SEE INDIVIDUAL CABLES FOR FAILURE EFFECTS AND DETECTION METHODS 



OPERATING MODES 





A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G 

OPERATE 

B TRANSITI ON TO WARM UP 

E 

STANDBY 

H 

TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE ' 

1 

FEATHER 




























MOD 2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

DRIVE TRAIN - EPS 

SLIP RING JUNCTION BOX 


FUNCTION OF COMPONENT 


PROVIDES A PROTECTED ELECTRICAL JUNCTION POINT FOR THE MIRES COMING OUT OF THE SLIP 
RINGS AND THE CABLES DISTRIBUTING POWER AND SIGNALS. 


FAILURE MODES 81 EFFECTS , , ...... , . £ 

i Open circuited conductqr ynthin junction box. Loss of assoc- 


iated function. 


Short circuited conductors within junction box. Loss of assoc- 


iated functions, erratic operation, or loss of meamngfu I, data. 


applicable 
OPERATING MOIES 


Conductor grounded within junction box. Loss of associated 


function. 




FAILURE FREQUENCY 



fai lure 

COMPONENT 

MEAN TIME 

MODE 

FAILURE RATE 

BETWEEN FAILURE 

FREQ %, 

x 10 6 PER HOUR 

(YEARS) 

50 

1.1 

200 

25 

1.1 

400 

25 

1.1 

400 


FAILURE SEVERITY * 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTRCPHIC 

IV 



FAILURE DETECTION METHODS 

i - 3 * 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE! 



* See individual cables for failure effects and detection methods 


for each signal and power line. 



name G. TRUSK / h. Roth 


date8/ 17/78 


OPERATING MODES 



Rev. 10/5/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H - TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 - FEATHER 






































SUBSYSTEM 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT PAGE 32 

POWER CABLE TO HYDRAULIC SYSTEM fmeano 5. 1.6. 3.1 


DRIVE TRAIN - EPS 


FUNCTION OF COMPONENT 

PROVIDES A PATH FOR THE FLOW OF ACCESSORY POWER ON THE LOW SPEED SHAFT FROM THE SLIP , 


RING JUNCTION BOX TO THE PITCH CONTROL HYDRAULIC SYSTEM, 


FAILURE MOOES & EFFECTS 

1 


at reduced capacity. WTS may shutdown. 




APPLICABLE 
OPERATING MOLES 


F.G.H 


at reduced capacity. WTS may shutdown. 


Conductor is grounded., Hydraulic pump motors may operate at 


reduced capacity. WTS may shutdown. 


F.G.H 


F,G,H 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
TWEEN FAILL 
(YEARS) 



MARGINAL 

II 


CRITICAL CATASTROPHIC 

III IV 


>1500 


>3000 


.15 >3000 


FAILURE DETECTION METHODS 

, - 3 WTS may shutdown if hydraulic accummulator pressure. cannot be maintained. 




DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

1-3 Periodic review of CRT data should reveal that pitch accummulator pressure 


has been low. 


1* Pump motors can run on 2 of the 3 phases; however, motor temperature will increase 



G. TRUSK /H. Roth | DATE 8/17/78 


OPERATING MODES 


Rev. 10/5/78 

A SHUTDOWN 

D - TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F TRANSITION TO OPERATE 

1 FEATHER 






























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT PAGE 33 

DRIVE TRAIN - EPS CONTROL CABLE TO THE HYDRAULIC SYETEMano 5.1 .6.3.2 

FUNCTION OF COMPONENT 

PROVIDES A PATH FOR THE FLOW OF COMMANDS AND OPERATIONAL DATA ON THE LOW SPEED SHAFT 


FROM THE SLIP RING JUNCTION BOX TO THE ROTOR PITCH CONTROL HYDRAULIC SYSTEM. 


FAILURE MODES & EFFECTS 

1 


APPLICABLE 
OPERATING MOLES 


cannot be accomplished. WTS will shutdown. 


commands or data present. WTS will shutdown. 


3 A control of data wire is grounded Control function cannot 
be accomp Fished. WTS will shutdown” 7~Z~n 


F,G,H 


f,g,h 



failure frequency 


FAILURE SEVERITY 



COMPONENT MEAN TIME 

FAILURE RATE BETWEEN FAILURE MINIMAL 

v in Apfq uni id (YEARSI I 


>1500 


>2000 


>3000 


MARGINAL 

II 


CRITICAL CATASTROPHIC 

III IV 



FAILURE DETECTION METHODS 

t - 3 WTS shutsdown due to differential pitch signals. 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



REV. 10/5/78 

A -SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

8 TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 





















MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT PAGE 34 

DRIVE TRAIN - EPS' ROTOR ACTUATOR CONTROL CABLE fmeano 5. 1.6. 3. 3 

FUNCTION OF COMPONENT 

PROVIDES A PATH FOR THE FLOW OF COMMANDS AND OPERATIONAL DATA ON THE LOW SPEED SHAFT 


FAiLURE^oDE^a E^FEj:Ts data wi re . s 0 p en circled. Control function can- 
not be accomplished, wiswill shutdown. 

2 A control or data wire is shorted to another wire, incorrect 


commands or data present. 


3 A control or data wire is grounded.' Control function cannot ■ 
, be accompl ished. WTS will shutdown. 




FAILURE DETECTION METHODS u 

i -3 WTS shutsdown due to differential' pitch position signals. 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 


REV. 10/5/71 

A SHUTDOWN 

B TRANSITION TO WARM-UP 
C WARM UP 

D TRANSITION TO STANDBY 
E STANDBY 

F - TRANSITION TO OPERATE 

G OPERATE 

H TRANSITION TO FEATHER 
1 FEATHER 






















MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

DRIVE TRAIN-EPS 

COMPONENT 

FLEX CABLE ACROSS TEETER BEARING 

PAGE 35 

FMEANO 5. 1.6. 3. 4 

FUNCTION OF COMPONENT 



FAILURE MODE S & EFFECTS 
1 


APPLICABLE 
OPERATING MOLES 


be accomplished. WTS will shutdown. 


commands or data “present. WTS will shutdown 


accompl i shed . WTS wi 1 1 shutdown . 


FAILURE FREQUENCY 

failure 
MODE NO 

failure 

MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

1,2,3 

100 

11.41 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 





FAILURE DETECTION METHODS 

, WTS shutsdown due to differential pitch position signals. 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



REV. 10/5/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B- TRANSITION TO WARM UP 

E 

STANDBY 

H - TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 





























SUBSYSTEM 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT PAGE 35 

TEETER BEARING BONDING STRAP fmeano 5. 1.6. 3. 5 


DRIVE TRAIN - EPS 


FUNCTION OF COMPONENT 

PROVIDES A PATH FOR THE FLOW OF LIGHTNING CURRENT AROUND THE TEETER BEARING FROM THE 
ROTOR TO THE DRIVE TRAIN. 


FA 7 fo^| & s¥igs open circuited. 


2 Bonding strap has high resistance due to fraying. 


3 Bonding strap has high resistance due to poor bond connection. 


FAILURE FREQUENCY 

FAILURE COMPONENT MEANTIME 

FAILURE MODE FAILURE RATE BETWEEN FAILURE 


MODE NO FREQ % x f 0 6 PER^HOUR 


1.1 


(YEARS) 


MINIMAL 

I 




FAILURE DETECTION METHODS 

, _ 3 Periodic Inspection 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

1-3 When lightning strikes a rotor blade the resultant extremely high current will 


follow the path of least resistance to ground. If an infinite or high resistance 




through the teeter bearing resulting in erratic operation and WTS shutsdown. Re 


dundant bonding straps will be used to preclude this failure mode. 5 


cally. Probability of both straps failing is. negligible. 


1* Rotor will operate with the teeter mechanism inoperative. 



G. TRUSK / H. Roth P ATE 8/17/78 


OPERATING MODES 



Rev. 10/5/78 

A SHUTDOWN 

D 

TRANSITION TO STAND8Y 

G OPERATE 

8 TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 - FEATHER 


78 K 6162-001 




























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

DRIVE TRAIN - EPS 

COMPONENT 

ROTOR JUNCTION BOX 

PAGE 37 

fmeano 5. 1.6. 4 

FUNCTION OF COMPONENT 

PROVIDES A PROTECTED ELECTRICAL JUNCTION POINT FOR THE RIGID CABLE COMING OUT THE 



FAILURE MODES & EFFECTS 

1_ Op en_cjxau±ed_ 
function. 


applicable 
OPERATING MOLES 


I til ■ HIKVWI] 


associated functions, erratic operation, or loss of meaningful 




FAILURE FREQUENCY 


FAILURE 
MODE NO 



COMPONENT MEAN TIME 

FAILURE RATE BETWEEN FAILURE 

x 10 6 PER HOUR (YEARS) 


5 


failure severity 

MINIMAL 

1 

MARGINAL 

11 

CRITICAL 

III 

CATASTROPHIC 

IV 


3 

'25 

5 

88 



FAILURE DETECTION METHODS 

! WTS shutsdown. See individual signal and power line; 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 



See individual signal wires for impacts. 



name g. TRUSK / H. Roth 


DATE 8/17/78 


OPERATING modes 



Rev. 10/6/71 

A SHUTDOWN 

0 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

c WARM-UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 































MOD-2 Failure Mode and Effects Analysis 

PAGE 38 

FMEANO 5.2.1 

FUNCTION OF COMPONENT 


SUBSYSTEM 

DRIVE TRAIN 


COMPONENT 
QUILL SHAFT 


TO TRANSMIT ROTOR TORQUE FROM THE LOWSPEED SHAFT TO THE GEAR BOX AND 


TO LIMIT TORSIONAL ROSONANCE 


FAILURE MODES & EFFECTS 

i ; . . 

SHAFT FAILURE - WOULD ALLOW ROTOR TO FREE WHEEL 


2 


APPLICABLE 
OPERATING MODES 


F.G.H ' 


3 


4 


FAILURE FREQUENCY 


failure 

MODE NO 


failure 

MODE 
FREQ % 


100 


failure rate 

x ICf 6 PER HOUR 

3.4- 


mean time 

BETWEEN FAILURE 
(YEARS) 

33.3 


FAILURE SEVERITY 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL 

III 


CATASTROPHIC 

IV 




FAILURE DETECTION METHODS 

7 LOSS OF GENERATOR LOAD INITIATES (ELECTRICAL) EMERGENCY SHUTDOWN DUE TO SUDDEN 

DROP 'IN POWER OUTPUT. AS BACKUP TO THIS SHUTDOWN PROCEDURE, THE OVERSPEED SWITCH 
ON THE LOW SPEED SHAFT INITIATES SHUTDOWN. 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 


STRUCTURAL AND FATIGUE ANALYSIS ACCOMPLISHED TO CONFIRM ADEQUATE SAFETY MARGIN 
IN DESIGN. WTS WILL NOT EXCEED DESIGN OVERSPEED LIMITS UNDER THESE CONDITIONS. 


* DESIGNATED CATISTROPHIC DUE TO HIGH COST OF REPLACING THE QUILL SHAFT. 


| name ROLF LUTH 

OPERATING MODES 


I DATE 8/7/8 
Rev. 11/27-/78 


A SHUTDOWN 

8 TRANSITION TO WARM-UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78 K -6162 -001 REV 1 























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT PAGE r>Q 

DRIVE TRAIN QUILL SHAFT COUPLING fmeano 5.2.2 


FUNCTION OF COMPONENT 

TO TRANSMIT TORQUE FROM LOW SPEED SHAFT TO GEAR BOX AND TO ACCOMMODATE SHAFT 


MISALIGNMENT 


FAILURE MODES & EFFECTS 

PLING STRUCTURAL FAILURE - WOULD PERMIT ROTOR TO FREEWHEEL 


2 COUP! TNG INCIPIENT FAILURE OR DAMAGE DUE TO OVERLOAD, 


applicable 
OPERATING MODES 


F,G,H 


F,G,H 



FAILURE frequency 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x 10" i * * * * 6 PER HOUR 

MINIMAL 

1 

— 

MARGINAL 

II 

CRITICAL 
III - 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i BREAK IN LOAD PATH CAUSES LOSS OF GENERATOR LOAD WHICH INITIATES EMERGENCY SHUT 


DOWN AS UTILITY TRIES TO DRIVE GENERATOR. _ _ 


ULiiriniL i nxuunt uliluill 

? INEFFICIENT JOINTS CAN CAUSE UNDETECTABLE TEMP. RISE - FM(1) ABOVE 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 


IF DETECTED BY INSPECTION PRIOR TO FAILURE MODE 1 OCCURRING. 


ROTOR OVERSPEED IS WITHIN DESIGN LIMITS. 





DATE 8/7/8 


OPERATING MODES 





A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G 

- OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H 

TRANSITION TO FEATHER 

C WARM-UP 

F 

TRANSITION TO OPERATE 

1 

FEATHER 


78 K -6162-001 REV 1 































SUBSYSTEM 

DRIVE TRAIN 


MOD-2 Failure Mode.and Effects Analysis 


COMPONENT 

GEARBOX MOUNTING INSTALLATION 





FUNCTION OF COMPONENT 

TO ATTACH G/B TO NACELLE BASE PLANE TO MAINTAIN DRIVE TRAIN ALIGNMENT AND TO REACT 


LOADS. 


WORKING LOOSE, CAUSING LOSS OF ALIGNMENT 


2 ATTACHMENT BOLT FAILURE CAUSING MAJOR FAILURE OF DRIVE TRAIN 


APPLICABLE 
OPERATING MODES 


G,H 


. G,H 



FAILURE FREQUENCY 

MEAN TIME 
• BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i MISALIGNMENT WOULD BE DETECTED BY BEARING TEMPERATURE AND VIBRATIONS SENSORS AND 


2 SYSTEM WOULD -SHUT DOWN. 


3 




ATTACHMENT BOLT FAILURE WOULD BE SENSED AS ABOVE 




FAI LURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

MARGINAL IF DETECTED DURING INSPECTION PRIOR TO EXCESSIVE VIBRATION 


CAUSING SHUTDOWN. 


» REQUIRES DOUBLE FAILURE - NEGLIGIBLE PROBABILITY. , « 



date 8/7/78 


OPERATING MODES 






A SHUTDOWN 

D 

TRANSITION TO STANDBY 


G 

OPERATE 

B TRANSITION TO WARM-UP 

E 

STANDBY 


H 

TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 


i - 

FEATHER 


























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT PAGE 41 

DRIVF TRAIN GEARS AND SHAFTS fmeano 5.3.2 


FUNCTION OF COMPONENT 

TO TRANSFER ROTOR TORQUE AND INCREASE RPM (FROM 17.5 RPM TO 1800 RPM) 



FA,l ; UR lB§§ E bf TO6T>ATH DUE TO CHIPPED GEAR OR SHEARED SHAFT - WOULD 


ALLOW ROTOR TO FREE WHEEL. 


2 DAMAGED GEAR TEETH - COULD EVENTUALLY LEAD TO FM(1) ABOVE 


APPLICABLE 
OPERATING MODES 


F,G,H 


F»G,H 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARSI 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

CRITICAL 

Ml 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


' LOSS OF GENERATOR LOAD DUE TO BROKEN LOAD PATH WILL INITIATE (TECHNICAL! EMERGENCY 


SHUTDOWN AS UTILITY TRIES TO DRIVE GENERATOR. (2) DAMAGED GEAR TEETH SHOULD BE 


INDICATED BY CHIP DETECTOR IN SUMP WHICH SHUTS DOWN SYSTEM. ROTOR OVERSPEED 


WILL ALSO INITIATE SHUTDOWN, VIA RPM SENSOR. 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



name ROLF LUTH 


DATE 8/7/8 


OPERATING MODES 



Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G - OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHE R 

C WARM-UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K -6162-001 REV 1 
































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

DRIVE TRAIN 

COMPONENT 

GEAR BOX BEARINGS 

PAGE 42 

FMEANO 5.3.3 

FUNCTION OF COMPONENT 

TO ALIGN GEAR TRAIN COMPONENTS AND REDUCE GEAR/SHAFT FRICTION 



V RE ^W^ E M r 0RH WHILE RUNNING - RESULTANT MISALIGNMENT OF GEARS ope A rating B mooes 


F.G.H 


2 BEARING DETERIORATIONS - INCREASE IN TEMPERATURE AND NOISE 

LEVELS All. 



failure frequency 

failure failure rate meantime 

FAILURE MODE FAIlAJHt HA It BETWEEN FAILURE 
MODE NO FREQ % *10'° PER HOUR (YEARS) 


FAILURE SEVERITY 

MINIMAL 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i 1, 2 OIL TEMPERATURE AND VIBRATION SENSORS CAUSE SYSTEM SHUTDOWN. 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 


TEMPERATURE AND VIBRATION SENSORS WILL PICK UP. IMPENDING FAILURE PRIOR TO 


SERIOUS STRUCTURAL DAMAGE. 



OPERATING MODES 



Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 - FEATHER 



































SUBSYSTEM 

DRIVE TRAIN 


FUNCTION OF COMPONENT 

T 


MOD 2 Failure Mode and Effects Analysis 


COMPONENT 

HIGH SPEED SHAFT 


PAGE 

FMEANO 5.4.1 



FAILURE MffififljFggfijft _ MQULD ALLQM RQTQR jQ p REE WHEE j_ 


APPLICABLE 
OPERATING MODES 


F.G.H 



FAILURE FREQUENCY 


FAILURE 
MODE NO 


COMPONENT MEAN TIME 

FAILURE RATE BETWEEN FAILURE 
v in 6 PFR HOMO (YEARS) 



FAILURE SEVERITY 

- 

MINIMAL 

l 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 




FAILURE DETECTION METHODS 

i LOSS OF GENERATOR LOAD WOULD SHUT DOWN. GENERATOR AND FEATHER BLADES. 


SHUTDOWN INITIATED THROUGH OVERSPEED SENSORS. - . ' 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE! 


ROTOR OVERSPE 




TDOWN WOULD BE WITHIN DESIGN UNITS. 



OPERATING MODES 



Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

c WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 



















SUBSYSTEM 

DRIVE TRAIN 


MOD 2 Failure Mode and Effects Analysis 

COMPONENT 

HIGH SPEED SHAFT COUPLING 


5.4.2 


EUNCTION OF COMPONENT _ / 

TO TRANSMIT TORQUE FROM GEAR BOX TO GENERATOR AND TO ACCOMODATE SHAFT MISALIGNMENT 


FAILURE MODES& EFFECTS 

i milPI TNG STRUCTURAL FAILURE - MOULD PERMIT ROTOR TO FREE WHEEL 


APPLICABLE 
OPE RATING MILES 



FAILURE FREOUENCY 

failure component meantime 

FAILURE MODE FAILURE RATE BETWEEN FAILURE 

MODE NO FREQ. % X 10 6 PER HOUR (YEARS) 



FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTfil^mC 

IV 



X 




X 



FAILURE DETECTION METHODS 

1 BREAK IN LOAD PATH CAUSES LOSS OF GENERATOR LOAD WHICH INITIATES EMERGENCY SHUT DOWN 


2 0F GENERATOR AND' THE FEATHERING OF THE BLADES. 

Inefficient joints can cause undetected temperature rise"- ultimate failure detected per 

3 FM(.l ) ABOVE. 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


INSPECTION OF WTS @ 2-MONTH INTERVALS SHOULD DETECT INCIPIENT FAILURES. 


name R 0LF LIJTH 


OPERATING MODES 


DATf 8/7/78 


Rev. 10/25/78 


A SHUTDOWN 
B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITI ON TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 

H - TRANSITION TO FEATHER 
I FEATHER 


78 K 6162-001 









MOD 2 Failure Mode and Effects Analysis 


SUBSYSTE M 

DRIVE TRAIN 


f UNCTION OF component 

TO POSITION AND HOLD ROTOR 


COMPONENT 

ROTOR BRAKE 


PAGE 45 


rriE A NO 


5.5 


FAILURE MODE S & EFFECTS 

i HYDRA ULIC/ EL ECTRIC FAILURE WOULD CAUSE B RAKE TO CLOSE WHICH WOUL D 


BU RN IT OUT AT FULL. -TORQUE.- 

2 FAILURE OF BRAKE TO OPERATE MOU LD PERMIT BLADE TO STOP AT ANY 


ANGLE AND WOULD PRECLUDE HO LDING ROTO R IN SELECTED POSITION. 


FAILURE FREQUENCY 


FAILURE 
MODE NO 


FAILURE 
MODE 
FREQ % 


COMPONENT 
F At LURE RATE 

x 10 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


APPLICABLE 
OPE RATING MLCES 


F> G, H 


A, B,C,D,E,H,I 


. FAILURE SEVERITY 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL 

III 


catastp;-hic 

IV 


95 


18.3 


6.6 


2 . 


18.3 


125 


FAILURE DETECTION METHODS 


2. VISUAL INSPECTION 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE! 


MOD-2 DESIGN INCORPORATES CAPABILITY TO MANUALLY TURN ROTOR AND LOCK 


LOW SPEED SHAFT IN DESIRED POSITION. 


name 


ROLF LUTH 


DATg/7/78 


OPERATING MODES 


Rev. 1 0/25/ TO 


A SHUTDOWN 
B TRANSITION TO WARM UP 
C - WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 

H TRANSITION TO FEATHER 
I -FEATHER 


78 K 6162-001 


MOD-2 Failure Mode and Ef.'ct: Analysis 


SUBSYSTEM 

DRIVE TRAIN 


COMPONENT 

GEARBOX LUBRICATION 


PAGE 46 


FME A NO 


5.6.1 


FUNC PR0VI°DE Cl LUB 0 R N I E CATION, AND REMOVE HEAT FROM THE GEARBOX BEARINGS AND GEARS. 


f A'^flifMp FAILURE - AUXILIARY PUMP IS STARTED - 


applicable 
OPERATING MODES 


F,G,H 


SEAL FAILURE - LOSS OF FLUID - LOSS OF GEARBOX IF UNDETECTED 


F, G, H 


HEATER FAILURE - WTS WILL NOT START - LOW FLUID TEMPERATURE 


F. G, H 


BLOCKED FILTER - PRESSURE DIFFERENTIAL ACROSS FILTER TRIPS 


F,G,H, 


BYPASS VALVE, WTS SHUTDOWN AFTER TIME DELAY. 


FAILURE FREQUENCY 




FAILURE SEVERITY 

• 

failure 

MODE NO 

failure 
MODE 
FREQ % 

FAILURE RATE 
x Hf 6 PER HOUR 

MEAN 
BETWEEN 
( YEP 

TIME 

FAILURE 

RS! 

M NIi'.AL 

MARGIN 

II 

AL 

CRITICAL 

III 

Catastrophic 

IV 

1 

inn 

20 

6 

7> * ' 


X 

tV> 

- 

- 

2- 

100 

10 

12 



X 




3 

100 

5 

30 





X 


A 


Not A 

)pl i cable 




X 



FAILURE DETECTION METHODS 


’ VISUAL INSPECTION 


2 2. WTS SHUTDOWN 
3rwTC“D0FS”N0T”START - 




FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

ft> THE GEARBOX LUBE SYSTEM IS REDUNDANT, IF A PUMP FAILURE DOES NOT 


RESUbT.IN THE STARTING OF THE AUXILIARY PUMP THE WTS WILL SHUT DOWN- 


£> PUMP AND SEALS ARE REDUNDANT. THIS FAILURE RATE IS FOR A SINGLE PUMP. 

PROBABILITY OF BOTH PUMPS FAILING BEFORE THE FIRST ONE IS REPAIRED IS 

NEGLIGIBLE. 


* 

. 

- 

- 

.•ame roLF LUTH DATE 1 0/20/71 

OPERATING MODES ' Rev. 10/25/71 

A SHUTDOWN- 0 TRANS. TlO. TOST, DC'- G OPERATE ' 3/8/79 

8 TRANSITION TO WARM UP" E STANDBY H TRANSITI ON TO FE ATHE R 

C WARM UP F TRANSITIO" TO C. ST ATE 1 FEATHER 


lo K 6162-001 REV 1 



MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT 

DRIVE TRAIN • ROTOR BEARING LUBRICATION 


FUNCTION OF COMPONENT 

PROVIDE LUBRICATION FOR ROTOR BEARINGS 



APPLICABLE 
OPERATING MODES 


CONTAMINATED FLUID - EXCESSIVE WEAR ON MOVING , PARTS 


OIL IS COLD - TOO THICK FOR PROPER LUBRICATION - 


F, G, H 



FAILURE FREQUENCY 


failure faiiijrerate 
failure mode failuhemaie 

MODE NO FREQ % * 10"° PER HOUR 



- 


FAILURE SEVERITY 

* 

MEANTIME ■' 
BETWEEN FAILURE 
(YEARSI 

Mir iriAL - 

i 

MARGINAL 
. II 

CRITICAL 

III 

CATASTROPHIC 

IV 





FAILURE DETECTION METHODS 


i BEARING OVERHEATS - WTS SHUTS DOWN - VISUAL INSPECTION 


2 INSPECTION - VISUAL 

3 NONE 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

I. IF NOT DETECTED PRIOR TO WTS SHUTDO WN 

__ FLUID WILL BE CHANGED AT SIX M ONTH INTERVALS T O MINIMIZE 

CONTAMINATION AND ADJUST TO SEASONAL CHANGES. 



, ‘ 



. [Narir ROLF 

LUTH ’ ' date 10/20/7: 

OPERATING MODES 



Rev. 10/Zt>/)l 

A SHUTDOWN 

D 

TRAN3I riON TO S7AUOB' 

G OPERATE 

B TRANSITION TO WARM UP 

£ 

STANDBY 

H - TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION 1 0 OPERATE 

1 - FEATHER 


78 K 6162-001 REV 1 













MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

DRIVE TRAIN 


COMPONENT 

GENERATOR LUBRICATION 


PAGE 48 

FMEANO 5.6.3 


FUNCTI ON OF COMPONE NT 

PROVIDES LUBRICATION TO THE SLEEVE BEARINGS SUPPORTING THE GENERATOR ROTOR AT EACH 


END OF THE GENERATOR FRAME. 



APPLICABLE 
OPERATING MODES 


DIRTY OIL: EXCESSIVE WEAR ON MOVING PARTS 


OIL TOO THICK (COLD) 




FAILURE FREQUENCY 

FAILURE 
MODE NO 

FAI LURE 
MODE 
FREQ % 

FAILURE RATE 
x 10* 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 




MINIMAL 

I 


ive wain 


FAILURE SEVERITY 


MARGINAL 

II 


CATASTROPHIC 

IV 


us 



FAILURE DETECTION METHODS 


1 WTS SHUTDOWN WHEN BEARING OVER TEMPERATURE IS PRESENT. 


2 NONE, UNLESS OVERTEMP OCCURS 


3 WTS IS SHUTDOWN 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

Il> IF UNDETECTED BY INSPECTION PRIOR TO WTS SHUTDOWN. 


1. When oil level drops below oil ring, lubrication of the bearing begins to 


eteriQrate unti 


y toe source 


low level or presence of oil on floor. Inspect and replace bearing if necessary. 


2. Periodic maintenance should detect this condition. 


3. Generator space heaters wi.ll keep the oil warm. See also FMED 6.8.3.11. 



date 10/20/8 


OPERATING MODES 



Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM-UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 
































MOD 2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

DRIVE TRAIN ASSEMBLY - EPS 

GENERATOR ' 


FUNCTION OF COMPONENT 

CONVERTS SHAFT TORQUE AT 1800 RPM INTO ELECTRICAL POWER 



fa| lur^^^ l fe^ D ing fail to 0pEN _ causes loss of ELECTRICAL POWER 


OUTPUT AND WTS SHUTDOWN 


-2 ELECTRICAL WINDING FAIL SHORTED OR GROUNDED: CAUSES LOSS OF 


ELECTRICAL POWER OUTPUT AND WTS SHUTDOWN 


3 GENERATOR OVERHEATS. CAUSES GENERATOR CIRCUIT BREAKER TO OPEN 


WHICH CAUSES WTS TO SHUT DOWN. 


4 GENERATOR MECHANICAL FAILURE: CAUSES ABNORMAL POWER GENERATION 
WHICH OPENS GENERATOR CIRCUIT BREAKER WHICH CAUSES SHUTDOWN. 


APPLICABLE 
OPERATING MCCES 



FAILURE FREQUENCY 


FAILURE SEVERITY. 


failure 

MODE NO 

failure 
MODE 
FREQ. % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

1,2, 3, 4 

100 

10.3 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL 

III 


CATASTROPHIC 

IV 




FAILURE DETECTION METHODS 

i POWER PROTECTIVE RELAYS SEE SECTION 6.8 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


GENERATOR HAS MULTIPLE PROTECTIVE DEVICES SENSING CURRENT, VOLTAGE AND 


TEMPERATURE. EACH INITIATES WTS SHUTDOWN UPON WARNING SIGNAL. 



OPERATING MODES 



Rev. 1 0/25/71 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B - TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K 6162-001 




























SUBSYSTEM 

NACELLE 


FUNCTION OF COMPONENT 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

PRIMARY TRUSS STRUCT. 


PAGE 50 

FMEANO 6.1.1. 





FAILURE MODES & EFFECTS 

I CRACK IN WELD 


IN WELD OR TRUSS MEMBERS 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 


MEAN TIME 
TWEEN FAILL 
(YEARS! 


FAILURE SEVERITY . 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 
' IV 



FAILURE DETECTION METHODS 

1 HIGH LEVEL OF INITIAL INSPECTION OF WELDS AND STRUCTURE. 


3 ALIGNMENT CHECK PERIODICALLY. 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


I MIOlMBmCtRMM I Wia a 




PERIODIC INSPECTION OF CRITICAL WELDS SHOULD DETECT CRACK BEFORE TOTAL MEMBER FAILURE. 



CRITICAL MEMBERS. 


K. HERNLEY 


DATE 8-16-78 


OPERATING MODES 



Rev. 10/25/7E 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

e 

STANDBY 

H - TRANSITION TO FEATHER 

C WARM-UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K -6162-001 































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

NACELLE . “ 


FUNCTION OF COMPONENT 

SUPPORTS ENCLOSURE AND WALKWAYS AROUND GENERATOR BAY 


COMPONENT *' 

SECONDARY SUPPORT STRUCT. 


6 . 1.2 





ENCLOSURE DAMAGE 


2 CORROSION DAMAGE 


ENCLOSURE DAMAGE 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

* 10 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS! 


FAILURE SEVERITY 


MINIMAL 

1 

marginal 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 

1 HIGH LEVEL OF INITIAL WELD INSPECTION 


2 FREQUENT INSPECTION 


WeTd S CRAC^Tn? R CA E N T BE E REDUCED M^MORE 'COSTLY INITIAL INSPECTION OR ENCLOSURE ISOLATION 


BY ELASTOMERIC MOUNTS. FREQUENT VISUAL INSPECTION WOULD DETECT FAILURES OF MEMBERS. - 


MULTIPLE LOAD PATHS DECREASE PROBABILITY OF UNDETECTED FAILURE 



DATE8-16-78 


OPERATING MODES 


Rev. 10/25/78 

A SHUTDOWN 

D - TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F TRANSITION TO OPERATE 

1- FEATHER 


78-K-6 162-001 


































SUBSYSTEM 

NACELLE !• 


FUNCTION OF COMPONENT 

TRANSFERS LOADS FROM NACELLE TO YAW BEARING 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

YAW BEARING SUPPORT STRUCTURE 


FAILURE MOOES & EFFECTS 




APPLICABLE 
OPERATING MODES 


CORROSION OF WELD OR MEMBER - NACELLE DISPLACEMENT 


FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

COMPONENT 
FAI LURE RATE 

x 10 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 


, X IT 


FAILURE DETECTION METHODS 
1 


2 FREQUENT INSPECTION 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


gySMtuMai] 


llt'lfeifiJ 


OPERATING MODES 


NAME K. HERNLEY 


A SHUTDOWN 

B - TRANSITI ON TO WARM UP 
C- WARM-UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


DATE 8/16/78 


Rev. 10/25/78 


G OPERATE > 

H TRANSITION TO FEATHER 
I - FEATHER 


78 K-61 62-001 



























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

NACELLE 

FWD BEARING SUPPORT 


FUNCTION OF COMPONENT 

TRANSFERS RADIAL LOAD FROM LIVE-SHAFT TO NACELLE TRUSS. 



'^ UF Mff¥MtffOESULTS IN ROTOR DISPLACEMENT 


APPLICABLE 
OPERATING MODES 


2 WILL DAMAGE/DESTROY' BOTH SHAFT BEARINGS, LIVE SHAFT, AND 


COUPLING. 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



..FAILURE DETECTION METHODS 

1 HI GH LEVEL INITIAL INSPECTION 

2 FREQUENT INSPECTION 


3 INCREASING VIBRATION SENSED BY #1 VIBRATION MONITOR RESULTING IN WTS SHUTDOWN. 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE! 

THE BEARING SUPPORT TO TRUSS WELD IS MOST VULNERABLE. ADDITIONAL WELD AREA & HIGH 


FACTOR OF SAFETY REDUCES POSSIBILITY OF CATASTROPHIC FAILURE. FREQUENT INSPECTION AND 
MAINTENANCE OF PROTECTIVE PAINT ELIMINATES CORROSIVE DAMAGE. REDUNDANT SUPPORT DESIGN 
REDUCES POSSIBILITY OF SUDDEN COLLAPSE. 



name k. HERNLEY 


DATE 8/16/78 


OPERATING MODES 



Rev. 10/25/78 

A SHUTOOWN ' . 

D 

TRANSITION TO STANDBY 

G OPERATE 

B - TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM-UP 

F 

TRANSITION TO OPERATE 

1 - FEATHER 

























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

NACELLE. ’ 


COMPONENT 


AFT BEARING SUPPORT 


page 54 
FMEANO 6.1.5 


FUNCTION OF COMPONENT 

TRANSFER'S RADIAL & THRUST LOADS FROM LIVE SHAFT TO NACELLE 1 TRUSS 


FAILURE MODES & EFFECTS 

i WELD FAILURE 


.LIVE SHAF-T LIFTS & JAMS DRIVE TRAIN 


APPLICABLE 
OPERATING MODES 


F, G, H 


FAILURE FREQUENCY 


FAILURE 
MOPE NO 


FAILURE 
MODE 
FREQ % 


COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE SEVERITY 


MINIMAL 


MARGINAL 


CRITICAL 

III 


CATASTROPHIC 
. IV 


Included in 6.1.1 


FAILURE DETECTION METHODS 

i HIGH LEVEL OF INITIAL INSPECTION 


FREQUENT INSPECTION BY MAINTENANCE PERSONNEL 


#2 VIBRATION SENSOR INITIATES WTS SHUTDOWN 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

THE BEARING SUPPORT TO TRUSS WELD IS'MOST VULNERABLE. THERE ARE MULTIPLE LOAD PATHS. 
REDUNDANT STRUCTURE, AND HIGHER FACTORS OF SAFETY TO MINIMIZE PROBABILITY OF CATASTROPH 

failur e! 

MAINTENANCE OF PAINT ELIMINATES CORROSIVE DAMAGE. j* 


NAME K. HERNLEY 


DATfe '8/1 6/78 


OPERATING MODES 


Rev 10/25/78 


A -SHUTDOWN 

B - TRANSITI ON TO WARM UP 
C WARM-UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78-K 6162-001 


























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT 

NACELLE ENCLOSURE 


FUNCTION OF COMPONENT 

PROVIDES ADEQUATE ENVIRONMENTAL CONDITIONS FOR THE MAINTENANCE PERSONNEL & EQUIPMENT. 


page 55 
FMEANO 6-1-0 



FAILURE MODES & EFFECTS 

i SKIN OR STRINGER CRACKS AT FASTENERS 


APPLICABLE 
OPERATING MODES 



LEAKS - EVENTUAL PARTIAL SKIN LOSS 


3 CORROSION OF SKIN OR STRINGERS RESULTING IN LEAKS 



DAMAGE DUE TO LIGHTNING STRIKE AND/OR HAIL 



FAILURE FREQUENCY 


FAILURE 
MODE NO 

fai lure 

MODE 
FREQ % 

1-4 

Inc 


MEAN TIME 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

Ml 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 

i-3 FREQUENT INSPECTION 


GROUNDING OF STRUCTURE TO PROVIDE LIGHTNING PATH. 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


MAINTENANCE OF PAINT AND CORRODED 


. REDUCE CORROSIVE DAMAGE. CORRUGATED SKINS REDUCE NUMBER OF 


FASTENERS PERHAPS PERMITTING MORE COSTLY CORROSION RESISTANT FASTENERS. 



DATE 8/16/78 


OPERATING MODES 



Rev. 10/25/78 

A SHUTOOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM-UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 

































MOD-2 Failure Mode and Effects Analysis 

S 


SUBSYSTEM COMPONENT 

YAW DRIVE SYStEM . BRAKE DISC ? 


FUNCTI ON OF COMPONE NT 

SUPPORTS YAWBEARING AND PROVIDES CLAMPING SURFACE FOR BRAKE CALIPERS 


PAGE 56 1 

FMEANO 6.3.1 



AKS - COULD CAUSE BRAKE FAILURE AND/OR YAW BEARING ope^aV.ng^odes 


FAILURE 


2 BRAKE SURFACE WARPING, P THING. OR GALLING - CAUSING ERRATIC BRA 



failure frequency 


FAILURE COMPONENT 
MODE FAILURE RATE 

FREQ % x*10 6 PER HOUR 


.6 


.6 


\ 33' 4.6 - 


FAILURE DETECTION METHODS 

1 'VISUAL INSPECTION OF DISC- 




FAILURE SEVERITY 


1 MINIMAL 

, MARGINAL 

CRITICAL 

1 

II 

111 


• f 








SLOW OR ERRATIC YAW MOTION 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

LOW ALLOWABLES WILL MINIMIZE POTENTIAL FAILURES' 


ULWIF UNDETECTED TO POINT OF YAW BEARING FAILURE 



J. W. ACKER 


DATE 8/7/78 


OPERATING MODES 




Rev. 


A -SHUTDOWN 


D 

TRANSITION TO STANDBY 

G - OPERATE 

' 

B' TRANSITION TO WARM UP 


E 

STANDBY 

H - TRANSITION TO FEATHER 


C WARMUP 


F 

TRANSITION TO OPERATE 

1 - FEATHER 



78-K-6 162-001 



























SUBSYSTEM 

YAW DRIVE SYSTEM 


MOD-2 Failure Mode and .Effects Analysis 


COMPONENT . _ PAGE 57 

BEARING, GEAR ^PINIONS FME A NO 6.3.2 


FUNCTION OF COMPONENT 

THE BEARING- SUPPORTS .THE" NACELLE. AND PERMITS IT TO YAW. THE GEAR (PART OF THE BEARING) 


AND PINION TRANSMIT YAW DRIVE TORQUE FROM THE DRIVE GEAR BOX TO THE YAW “BEARING. 



FA ^ Uf BEAR D ING & STRUCTURAL FAILURE - -COULD CAUSE WTS JO BECOME I NOPERABL 


F,.G, H 



PINION FAILURE - WOULD CAUSE LOSS OF YAW DRIVE 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 


FAILURE SEVERITY 




FAILURE DETECTION METHODS ,• 

1 VISUAL INSPECTION. 


p £ - 

4 

• “ * • 

2 OBSERVATION OF ERRATIC YAW MOTION, OR LACK OF MOTION 


ra 

* 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


EXERCISE OF YAW SYSTEM TO MINIMIZE BRINELLING 


BEARING GEAR AND PINION SHOULD BE DESIGNED WITH A "WEAK LINK" TO MINIMIZE 


DAMAGE TO EXPENSIVE COMPONENTS 



OPERATING MODES 




Rev. 10/25/78 
Rev. 11/27/78 

A SHUTOOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H - TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 




















m 


, MOD Failure Mode and Effects Analysis 


COMPONENT 

GEAR BOX 


FUNCTION OF COMPONENT i - 

THE GEAR BOX PROVIDES TWO STAGES OF GEAR REDUCTION PERMITTING A HIGHER SPEED 


HYDRAULIC MOTOR TO DRIVE THE LOWER SPEED DRIVE PINION 


, (AND LOW SPEED GEAR) 


FAILURE MODES & EFFECTS 
1 




APPLICABLE 
UREfiPE RATING MODES 


F.G.H 



GEAR BOX FAILS TO TRANSMIT TORQUE - WTS WILL NOT YAW OR COMMAND 



FAILURE FREQUENCY 



FAI LURE 

COMPONENT 

MEAN TIME 

MODE 

FAILURE RATE 

BETWEEN FAILURE 

FREQ % 

x 10 6 PER HOUR 

(YEARS) 

LO 

00 

% 

14.8 

9 

10 

14.8 

154 

5 

14.8 

308 


FAILURE SEVERITY 

MINIMAL 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 

BI-MONTHLY INSPECTION 


3. ERRATIC YAW- MOTION 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Kev. 


A -SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 


B - TRANSITI ON TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 - FEATHER 


































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM “ _ . I COMPONENT _ r ^ PAGE 59 

HYDRAULIC MOTOR • . fmeano 6:3.4 


FUNCTION OF COMPONENT ' * 

THE HYDRAULIC MOTOR SUPPLIES THE PRIME POWER TO THE YAW DRIVE GEAR TRAIN, ON COMMAND, 


TO CAUSE THE WTS TO YAW. - 


FAILURE MOOES & EFFECTS 

i n inn i 


APPLICABLE 

I I OPERATING MODES 


F, G, H 


. F, G, H 



FAILURE FREQUENCY 



FAILURE SEVERITY 


FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

* 10 6 PER HOUR 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

MINIMAL 

t 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 

1 LEAKS - VISUAL. RESERVOIR LEVEL DEPLETION, LOW HYP. PRESSURE, LOW TORQUES. 


2 FAILURE TO YAW - WTS WILL NOT ASSUME COMMANDED POSITION 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Rev. 10/25/71 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 






























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT PAGE gQ 

YAW DRIVE SYSTEM HYDRAULIC PUMP & MOTOR fmeano 6.3.5 


FUNCTION OF COMPONENT 

SUPPLIES HYDRAULIC FLUID AT CONTROLLED 2000 PSI PRESSURE, ON DEMAND, TO OPERATE 'YAW 


HYDRAULIC MOTOR, YAW BRAKE CALIPERS, AND ROTOR BRAKE CALIPERS. 


FAILURE MODES & EFFECTS 

1 PUMP LEAKS EXTERNALLY 

- SYSTEM MAY BE DEPLETED 

, THEN FAIL TO 

APPLICABLE 
OPERATING MODES 



RELEASE OR YAW MOTION 


4 MOTOR FAILS - SAME AS #3 


F.G.H 


FAILURE FREQUENCY 


FAILURE 
MODE NO 



COMPONENT MEAN TIME 

FAILURE RATE BETWEEN FAILURE 


x 10 PER HOUR 


(YEARS) 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 


1 


3.4 

2 

10 

3.4 

3 

El 

57 

3 J 

FAILURE DETECTION METHODS 



1-4 WTS Shutsdown (low pressure sensor) 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 


Rev. 10/25/78 

A SHUTDOWN 

D TRANSITI ON TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E STANDBY 

H TRANSITION TO FEATHER 

C WARM-UP 

F - TRANSITION TO OPERATE 

1 - FEATHER 




































SUBSYSTEM 


I kiL \ *lil :! r J min i a y I 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

R 




PAGE gl 

FMEANO 6.3.6 


FUNCTION OF COMPONENT 

CONTAINS A SUPPLY OF HYDRAULIC FLUID FOR THE YAW HYDRAULIC SYSTEM 



FAILURE MODES & EFFECTS 
1 FYTFRNAI I 




applicable 
OPERATING MOOES 


F, G, H 


F, G, H 



FAILURE FREQUENCY 


COMPONENT MEAN TIME 

F Al LURE RATE BETWEEN FAILURE 
* in 6 pen (YEARS) 


FA'ILURE SEVERITY 

MINIMAL 

MARGINAL 

II 

CRITICAL ' 
III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 

i VISUAL INSPECTION OF RESERVOIR, SPILLED OIL IN NACELLE 


2 LOW SYSTEM PRESSURE OR LEVEL OR SYSTEM INOPERATIVE 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


IF DETECTED BY INSPECTION PRIOR TO CRITICAL FAILURE 



DATE 8/8/78 


OPERATING MODES 



Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G- OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM-UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 






























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

PAGE 62 

YAW DfUVk-SYSTEM 

HEAT EXCHANGFR 

FMEANO ? 

FUNCTION OF COMPONENT ' 

COOLS HYDRAULIC FLUID TO LIMIT 

MAXIMUM TEMPERATURE 

- 



fa VT« e ^5 f i f d e ,ct $ depletes reservoir, wts shuts 

WON'T RFLEASE ROTOR BRAKE 


WON'T YAW, 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 


FAI LURE 
FAILURE MODE 
MODE NO FREQ % 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



2.3 


FAILURE DETECTION METHODS 

i OVERTEMPERATURE SIGNAL 


3 HYDRAULIC SYSTEM FAILURE - OVERTEMP SIGNAL 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) ’ 


CRITICAL IF NOT DETECTED PRIOR TO SHUTDOWN 



OPERATING MODES 


1 

Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G - OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 































SUBSYSTEM 




FUNCTION OF COMPONENT 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

ACCUMULATORS ' { 2 ) 


PAGE 63 
FMEANO 6. 3. 6. 3 



At mnWW0F ACCUMULATOR CAPABILITY, RESULTING IN LOSS 


OF ABOVE FUNCTIONS 


APPLICABLE 
OPERATING MODES 


2 OIL LEAKS-LOSS OF ACCUMULATOR CAPABILITY. LOSS OF ABOVE FUNCTIONS 


POSSIBLE 

3 


Hdinmiucia 


F, G, H 


F, G, H 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x Kf 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


, FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i MONITOR GAS PRESSURES I 


2 VISUAL INSPECTION FOR OIL LEAK 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

1 If Undetected 



OPERATING MODES 


r 

Rev. 

10/25/78 

A -SHUTDOWN • " 

B TRANSITION'TO WARM UP 
C WARM UP 

D 

E 

, F 

TRANSITION TO STANDBY 
STANDBY 

TRANSITION TO OPERATE 

G OPERATE 

H - TRANSITION TO FEATHER 
1 FEATHER 


78 K -6162-001 REV 1 


ft 



• “ 

„ * 

' 

* C 
































MOO-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

YAW DRIVE SYSTEM 

COMPONENT 

RELIEF VALVES (3) 

PAGE g 4 - 

FMEANO 6. 3. 6. 4 

FUNCTION OF COMPONENT 

TO PREVENT OVERPRESSURE OF THE HYDRAULIC SYSTEM IN THE EVENT OF A PUMP 

1 PRESSURE 

COMPENSATOR FAILURE 



3 FAILS TO OPEN AT PRESET PRESSURE, COULD CAUSE HYDRAULIC COMPON- 


ENT OVERPRESSURE IF PUMP COMPENSATOR FAILS 



F. G. H 


F, G, H 


F, G, H 


FAILURE FREQUENCY 


FAILURE SEVERITY 


failure 
MODE NO 

FAILURE 
MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

1 

70 

51.3 

3.2 - 

2 

20 

51.3 

11.1 

3 

10 

51.3 

22.2 

| FAILURE DETECTION METHODS 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL CATASTROPHIC 



i VISUAL INSPECTION, WTS shutdown - r.. 


2 PERIODIC TESTING FOR PRESSURE SETTING - LOW PRESSURE, WTS SHUTDOWN 


3 SIGNAL SHUTS DOWN WTS. 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM-UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K 6162-001 





































MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

SOLENOID VALVES ( 2 ) 


SUBSYSTEM 

YAW DRIVE SYSTEM 


FUNCTION OF COMPONENT 

TO RELEASE ROTOR BRAKE AND/OR YAW BRAKE,- ON COMMAND 


l*iv*h*j 



applicable 
OPERATING MODES 


OPERATE - ROTOR BRAKE, OR YAW BRAKE WILL NOT RE- 


LEASE- WTS CANNOT START F, G, H 


2 VALVE FAILS TO DEACTIVATE - ROTOR BRAKE OR YAW BRAKE WILL NOT 
APPLY UNTIL PRESSURE IS RELEASED BY FLUID BLEEDING BACK THROUGH A, B, C, D, E, I 


3 SYSTEM, OR YAW CONTROL VALVE IS SHUTTLED. 



FAILURE FREQUENCY 


FAILURE COMPONENT 


MEAN TIME 


FAILURE MODE 
MODE NO FREQ % 


FAILURE RATE BETWEEN FAILURE 


x 10” PER HOUR 


(YEARS) 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 




2 BRAKE(S) FAIL TO RELEASE OR APPLY (WHEN SYSTEM IS OTHERWISE OK). 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 




Rev. 

Rev. 

wm 

A -SHUTDOWN 

D 

TRANSITION TO STANDBY 

' G OPERATE 

8 - TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 



































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

YAW DRIVE SYSTEM 

MOTOR CONTROL VALVE - 



FUNCTION OF COMPONENT 

CONTROLS YAW MOTION BY CONTROLLING FLOW AND DIRECTION-OF FLOW OF HYDRAULIC FLUID TO YAW 


DRIVE MOTOR. 


- COULD CAUSE UNCONTROLLED, ERRATIC YAW MOTION opeAat'.ng^odes 


ALL 


2 FAILS TO OPEN - WTS WILL NOT YAW ON COMMAND | 

F, G, H 


3 FAILS TO CLOSE - WTS WILL NOT STOP. YAW BRAKE WILL NOT APPLY ON 
COMMAND F, G, E, H, I 


LEAKS EXTERNALLY - COULD DEPLETE SYSTEM FLUID, CAUSE OPERATIONAL 
FAILURE IF UNDETECTED F, G, H 


FAILURE FREQUENCY 


FAILURE SEVERITY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 
' IV 



FAILURE DETECTION METHODS 

4 40 18.3 




1.2 ERRATIC MOTION IN YAW. DOES NOT FOLLOW COMMAND - MICROPROCESSOR SHUTS WTS DOWN. 


VISUAL INSPECTION: LOSS OF PRESSURE SENSED; LOSS OF LEVEL SENSED. 


3 WTS WILL SHUT DOWN IF YAW MOTOR MOVES NACELLE TO -WRONG POSITIO 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 




OPERATING MODES 


A SHUTDOWN 
B TRANSITION TO WARM UP 
C WARM-UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


DATE 8/9/78 


Rev, 10/25/78 


G- OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78-K 6162-001 








































MOD-2 Failure Mode and Effects Analysts 


SUBSYSTEM 

YAW DRIVE SYSTEM 


COMPONENT 

FITTINGS, TUBES, HOSES 


PAGE 67 

YAW SYSTEM FMEANO 6.3.6-. 7 


FUNCTION OF COMPONENT 

SUPPLIES PRESSURIZED HYDRAULIC FLUID TO YAW HYDRAULIC MOTORS 


FAILURE MODES & EFFECTS 

1 RUPTURE - LOSS OF SYSTEM PRESSURE & FLUID 


SYSTEMS WOULD FAIL 


TO OPERATE, 


APPLICABLE 
OPERATING MODES 


F,- G.'H 


2. IFAKAGE, 


-F, G, H 


FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAILURE 
MODE ' 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 

1 

10 

37.6 

30.3 



x 


2 

90 

37.6 

3.4 


t> X 

D>x 




. 








FAILURE DETECTION METHODS 

VISUAL INSPECTION OF SYSTEM 


LOW PRESSURE OR RESERVOIR LEVEL INDICATION RESULTING IN SHUTDOWN. 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


t> DEPENDS ON SEVERITY OF I FAK. LQSS_flF_P.R FfLSl I R F_LflLJ-I.AT£S_SHUIDQWN- MINOR LEAKS 

_ MAY BE DETECTED BY VISUAL I NSPECT ION. : 


name J. W. ACKER 


date 8/9/78 


OPERATING MODES 


Rev. 10/25/78 


A SHUTDOWN 

B - TRANSITI ON TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78-K 6162-001 



SUBSYSTEM 

YAW DRIVE SYSTEM 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT PAGE cp 

FITTINGS, TUBES, HOSES, .YAW BRAKE 6. 3.6.8 


FUNCTION OF COMPONENT 

SUPPLIFS PRESSURIZED HYDRAULIC FLUID TO YAW BRAKE CALIPERS .- 



FAILURE MODES & EFFECTS 




lalUfii 


LEAK - LOSS OF SYSTEM PRESSURE & FLUID SYSTEMS WOULD FAIL TO 


OPERATE. 


APPLICABLE 

OPERATING MODES 

_ F, G, 

H 

F, G, 

H 



FAILURE FREQUENCY 


FAILURE SEVERITY 


FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

1 

10 

2 

90 


COMPONENT MEAN TIME 

FAILURE RATE BETWEEN FAILURE 
x 10 6 PER HOUR (YEARS) 


3. 


MINIMAL 

MARGINAL 

_ CRITICAL 

1 

II 

III 




FAILURE DETECTION METHODS 

VISUAL INSPECTION 


LOW PRESSURE OR RESERVOIR LEVEL RESULTING IN SHUTDOWN 



DISCUSSION AND CORRECTI 

|l> 

VE ACTION (IF APPLICABLE 

:) < 



- 




BE DETECTED BY VISUAL INSPECTION. 

■ 



OPERATING MODES 



Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G- OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H - TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


































MOD-2 Failure Mode'and Effects Analysis 


SUBSYSTEM 

COMPONENT 

pace. 69 
fmeano 6.3.6‘:9 

YAW DRIVE SYSTEM 

FITTINGS, TUBES, HOSES .ROTOR BRAKE 

FUNCTION OF COMPONENT 

SUPPLIES PRESSURIZED HYDRAULIC FLUID TO ROTOR BRAKE CALIPER. 

- . 





FAILURE MODES Si EFFECTS 


OPERATE 


2 LEAKS - LOSS OF SYSTEM PRESSURE & FLUID, SYSTEM FAILS TO OPERATE 


APPLICABLE 
OPERATING MODES 




FAILURE FREQUENCY | 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 


1 

10 * 

3. 

2 

90 

3. 



FAILURE SEVERITY 

MEAN TIME 





BETWEEN FAILURE 

MINIMAL 

MARGINAL 

CRITICAL 

CATASTROPHIC 

(YEARS) 

1 

1 

II 

III 

IV 



FAILURE DETECTION METHODS 

VISUAL INSPECTION 


LOW PRESSURE & RESERVOIR LEVEL RESULTING IN SHUTDOWN 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 



date 8/8/78 


OPERATING MODES 



Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H - TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 

































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

YAW DRIVE SYSTEM 


COMPONENT FITTER'S - 

HIGH PRESSURE AND LOW PRESSURE/ 


PAGE fe9. | T 

FMEANO 6.3.6.10| 


11 


FUNCTION OF COMPONENT 

THE FILTERS REMOVE CONTAMINANTS FROM THE YAW DRIVE SYSTEM HYDRAULIC FLUID. 


F^tBEIg: COULD DEPLETE HYDRAULIC SYSTEM FLUID, CAUSING 


APPLICABLE 
OPERATING MODES 


SYSTEM FAILURE. 


F. G, H 


COULD RESULT IN- CONTAMINATION AS FILTERS 


ARE BY- PASSED. 


F, G, H 


FAILURE FREQUENCY 


failure 

MODE NO 


fai lure 

MODE 
FREQ % 


FAI LURE RATE 
x 10" 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE SEVERITY - 


MINIMAL 


MARGINAL 

II 


CRITICAL 

III 


CATASTROPHIC 

IV 


-ML 


JjQflL 


1 > 


Not 


ppl i cable 


FAILURE DETECTION METHODS 


VISUAL - LOOK FOR EXTERNAL LEAKS 


RESERVOIR OIL LEVEL INDICATOR WOULD- INDICATE GROSS LEAK. 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

|> IF NOT DETECTED BY INSPECTION PRIOR TO SYSTEM SHUTDOWN. 


2. FILTERS WILL BE CHANGED AT REGULAR MAINTENANCE INTERVALS. 


name J. W. ACKER 


DATE 10/23/8 


Rev. 10/2V78 
3/8/79 


OPERATING MODES 


A SHUTDOWN 

B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANS ITI ON TO OP E RATE 


-G OPERATE 

H - TRANSITION TO FEATHER 
I -FEATHER 


78 K -6162-001 REV 1 



SUBSYSTEM 

YAW DRIVE SYSTEM 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

CHECK VALVES (4) 


FUNCTION OF COMPONENT 

CHECK VALVES ARE USED TO PREVENT FLUID FROM FLOWING IN A REVERSE DIRECTION IN 


FLUID LINES. 


IN ROTOR BRAKE LINE - NO EFFECT UNLESS SOLENOID 


VALVE LEAKS ALSO. THEN ROTOR BRAKE WOULD CLAMP ON. 


2 FAILURE TO CHECK IN YAW BRAKE LINE - NO EFFECT. 


3 FAILURE TO CHECK IN PUMP OUTLET LINE - FLUID MAY BLEED BACK INTO 


PUMP ON SYSTEM SHUT-DOWN. 


4 FAILURE TO CHECK IN PUMP CASE DRIVE LINE - PUMP CASE COULD BE 


PRESSURIZED IF SYSTEM RETURN PRESSURE WAS 


APPLICABLE 
OPERATING MODES 

F, 

G, H 

F, 

G, H 

F, 

G, H 

F, 

G, H 


FAILURE FREQUENCY 


FAILURE SEVERITY 



failure 
MODE 
FREQ % 

FAILURE RATE 
x Kf 6 PER HOUR 

MEAN time 
BETWEEN FAILURE 
(YEARS) 

100 

3 

33 

100 

3 

33 


3 

33 


3 

33 



MARGINAL 

II 


CRITICAL CATASTROPHIC 



FAILURE DETECTION METHODS 


1-4 SYSTEM FUNCTIONAL TEST, OR REMOVE AND TEST COMPONENT. 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

NONE OF THESE FAILURES ARE CATASTROPHIC. MOST WOULD TAKE A DOUBLE FAILURE 


TO DO ANYTHING. THESE VALVES ARE IN THE SYSTEM AS A "BACK UP" ONLY. 



OPERATING MODES 



Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 

‘ F > ~ 
































SUBSYSTEM 

YAW DRIVE SYSTEM 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

NEEDLE VALVE 





FUNCTION OF COMPONENT 

THE NEEDLE VALVE IS USED TO ISOLATE THE SYSTEM PRESSURE GAGE SO IT MAY BF SFRVTf.Fn 


OR CALIBRATED. 


■MB 




effects 

LEAK - COULD DEPLET 


IN WTS SHUTDOWN. 


FAILURE TO CLOSE OFF COMPLETELY - WOULD PRECLUDE DEAD- WEIGHT 


TESTING THE GAGE BECAUSE OF INTERNAL LEAK. 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 

failure 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x icf 6 per HOUR 




FAILURE SEVERITY 

- 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


, EXTERNAL LEAK'- VISUAL INSPECTION, OF RESERVOIR LEVEL INDICATOR - 


2 FAILURE TO CLOSE - WOULD BE OBVIOUS TO MAN CHECKING OR SERVICING GAGE. 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 


If undetected by visual inspection prior to WTS shutdown. 



datE| 0/23/8 


OPERATING MODES 



Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP " 

F 

TRANSITION TO OPERATE 

1 FEATHER 

























MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

SYSTEM l WEATHER SHIELD 


SUBSYSTEM 

SYSTEM . . 


FUNCTION OF COMPONENT f ■' 

SHIELDS YAW DRIVE SYSTEM BEARING, BRAKE CALIPERS, AND DISC FROM THE 'WEATHER 


page 70 
FMEANO 6.3.7 



failure modes & effects 
i 




“ WEATHER SHIELD WOULD HAVE ONLY LONG TERM 


DELETERIOUS EFFECTS ON YAW COMPONENTS 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 

failure component meantime 

failure mode failure rate between failure 
MODE no FREQ % .,„ 6 DCDun „„ (YEARSI 


FAILURE SEVERITY 


MARGINAL 


CRITICAL CATASTROPHIC 

III IV 



FAILURE DETECTION METHODS 

i-2 VISUAL INSPECTION AT REGULAR INTERVALS & AFTER SEVERE WEATHER CONDITIONS. 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 


Rev. 10/25/75 

A SHUTDOWN 

D TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E STANDBY 

H TRANSITION TO FEATHER 

C WARM-UP 

F - TRANSITION TO OPERATE 

1 FEATHER 






















MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 


mMmvm&jativ 



PAGE 7^ 

FME A NO 6. " 3 . 8 


FUNCTION OF COMPONENT 

FASTENERS HOLD BEARING AND HYDRAULIC COMPONENTS IN PLACE 



FAILURE MODES & EFFECTS 


' . • . 

APPLICABLE 


wvxm 


OPERATING MODES 

BECAUSE OF REDUNDANCY. 


ALL 



FAILURE FREQUENCY 


FAILURE SEVERITY 


FAILURE 

FAILURE 

MODE 

MODE NO 

FREQ % 


- CRITICAL 

CATASTROPHIC 

Ml 

IV 



FAILURE DETECTION METHODS . 



: 

• i VISUAL INSPECTION ON REGULAR SCHEDULE. 




2 

3 


•« 

1 • , . 

DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

V 


• 



NAME J. W. ACKER 


DATE 8/8/78 


OPERATING MODES - ‘ 



Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G' OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H - TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 
























SUBSYSTEM 

YAW DRIVE SYSTEM 


FUNCTION OF COMPONENT 

1. CALIPERS ARE 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

BRAKE CALIPERS 


APPLICABLE 
OPERATING MODES 


1_. CALIPERS ARE SPRING LOADED TO CLAMP ON DISC TO PROHIBIT YAW MOTION. 

WHEN HYDRAULIC PRESSURE IS APPLIED, 6 nf 7 BRAKES, RELEASE, PERMITTING YAW 


MOTION (7th BRAKE MAINTAINS DRAG ON DISC FOR DAMPING PURPOSES). 


FAILURE MODES & EFFECTS 

1 MFCHANICAI OR SPRING FAII IlfiE - BRAKF WOULD RELEASE'. R EDUCING 
YAW HOLDING OR DRAG TORQUE. J> 


2 HYDRAULIC FAILURE - BRAKE WOULD NOT RELEASE, PROHIBITING OR 

INhTbTtING YAW MOTION . „ . ~ E, G, 

3 BRAKE PAD FAILURE - YAW BRAKE TORQUE MAY NOT BE ADEQUATE FOR 

HURRICANE WINDS A, E, I 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

FAI LURE 
MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 



3 TOO 


FAILURE DETECTION METHODS 


MEAN TIME 
BETWEEN FAILURE 
I YEARS) 


6 units for 


See 6 3.6.8 


6 Units for 


[ FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 
1 1 

CRITICAL 

III 

CATASTROPHIC 

IV 



position 


posi tion 



i VISUAL INSPECTION - ALL MODES OF FAILURE 


2 ERRATIC MOTION OR EXCESSIVE NOISE/LACK OF YAW MOTION ON COMMAND. WTS SHUTS DOWN 


3 (LOW HYDRAULIC PRESSURE OR LEVEL SIGNAL). 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

ft> REDUCING HOLDING TORQUE MAY ALLOW WTS TO WEATHERVANE. LOSS OF DRAG TORQUE 
MAY CAUSE YAW MOT I 


PROBABILITY OF F AILURE OFFSPRING OR_OTHER _MECHAN I CAL - J JEM-ON -JHE.-S INGLE 

DRAG BRAKE IS APPROXIM ATELY ONCE EVERY 1 QJCEABS AND WOlll 0 BF DFTFCTFD A T 2 
MONTH INSPECTION PERIOD. PAD WEAR WILL BE CHECKED EVERY 2 MONTHS. 



J W. ACKER 


date 8/8/78 


OPERATING MODES 



Rev. 

10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE ^ eV 

1 Ml* 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

u/o/79 

c WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 


COMPONENT 


ENVIRONMENTAL. CONTROL SYSTEM COOLING EQUIPMENT 


FUNCTION OF COMPONENT 

FANS EXHAUST HOT AIR FROM NACELLE, DRAW AMBIENT 


AIR INTO NACELLE TO MAINTAIN 



failure M ^gf^F|g^ R FAIL$ _ NACELLE overheats - WTS shuts -down 

APPLICABLE 
OPERATING MODES 

if overheat “affects components. ' '■ 

• F, G, H 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

COMPONENT 
FAI LURE RATE 

x to. 6 , PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 
1 KlArn I 




ACELLE OPERATING COMPONENTS INDICATE OVERTEMPERATURE 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


[j> IF COMPONENTS OVERHEAT SUFFICIENTLY TO CAUSE WTS SHUTDOWN. 


THE USE OF A NACELLE OVERTEMPERATURE SIGNAL DIRECTLY SHUTTING THE 
WTS DOWN IS CURRENTLY BEING CONSIDERED 



DATE 8/7/78 


OPERATING MODES 



Rev. 

10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE ReV. 

11/27/78 

B TRANSITION TO WARM UP 

E 

STANDBY 

H - TRANSITION TO LEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 - FEATHER 























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT 

TROL SYSTEM HEATING EQUIPMENT 


FUNCTION OF COMPONENT 

TBD - THERE IS, AT THIS WRITING, NO KNOWN REQUIREMENT TO HEAT THE NACELLE 




PAGE 74 

FMEANO 6.5.2 



FAILURE MODES & EFFECTS 
1 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 

] 

MEAN TIME 
8ETWEEN FAILURE 
(YEARS) 

. . 1 

FAILURE SEVERITY 

failure 
MODE NO 

failure 

MODE 
FREQ % 

COMPONENT 
FAILURE rate 

x 10 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 
1 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


J. W. ACKER 


DATE - 8/8/7 


OPERATING MODES 


~ 

Rev. 10/25/7? 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

- B TRANSITION TO WARM UP 

E 

STANDBY 

H - TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K 6162 001 























MOD-2 Failure Mode and Effects Analysis 


component HIGH voltage power cable 
TO THE GENERATOR ACCESSORY UNIT 


SUBSYSTEM 

NACELLE - EPS , 


FUNCTION OF COMPONENT 

PROVIDES A PATH FOR THE FLOW OF HIGH VOLTAGE GENERATOR OUTPUT CU RRENT FROM THE 
GENERATOR TO THE GENERATOR ACCESSORY UNIT. 


failure mooes & effects 

i Open circuit: One or more high voltage power phases go to zero; 


GCB* and BTC* open, WTS shuts down. 


2 Short circuit: Possible phase-to-phase or phase- to-neut fault; 


GCB and BTC open, WTS shuts down. 


3 Grounded conductor: Massive fault on one conductor; GCB and BTC 


open, WTS shuts do 


APPLICABLE 
OPERATING MODES 


FAILURE FREQUENCY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

1 

50 

1.6 

2 

25 

1.6 

3 

25 

1.6 - 



FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


CRITICAL 

CATASTROPHIC 

IN 

IV 



FAILURE DETECTION METHODS 


i- 3. Power output from WTS indicates zero; BTC and GCB position indicate "open' 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

1. Differential current protection relay will cause the GCB to open, or as a 


backup, the differential current. protection will cause the BTC to open within 
milliseconds. " 


2. Generator or bus tie unit differential current protection or generator 


over-current protection circuits- will cause the GCB and BTC to open within 


milliseconds. 


. Same as #2 plus the ground current relay will cause the GCB to open within 


milliseconds. 



*GCB - Generator circuit breaker 


*BTC - Bus tie contactor 


OPERATING MODES 


NAME H. Roth 


DATE 9/27/78 


Rev. 10/25/7F 


A SHUTDOWN 

B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78 K 6162-001 REV 1 


































SUBSYSTEM 

NACELLE - EPS 


FUNCTION OF COMPONENT 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

HIGH VOLTAGE POWER CABLES 


page ?5 

FME A NO 


6 . 6.1 


PROVIDES A PATH FOR THE FLOW OF HIGH VOLTAGE GENERATOR OUTPUT CURRENT FROM THE 


GENERATOR ACCESSORY UNIT TO THE CABLE TRANSITION MECHANISM. 


failur^modess effect? oneormore phases go to zero voltage; GCB* and 


BTC* open, WTS shuts down 


2 Short circuit: possible phase- to-phase fault; GCB and BTC open, 


WTS shuts down 


3 Grounded conductor- Massive fault on one conductor, GCB and 


BTC ooenj WTS shuts down 


APPLICABLE 
OPERATING MODES 




failure fre 

;quency 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

1 

failure 

MODE NO 

failure 
MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

1 

50 

1.6 

142 

2 

25 

1.6 

284 

3 

25 

1.6 

28 4 


FAILURE SEVERITY 

MINIMAL 

- MARGINAL 
(1 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 

1 - 3. Power output from WTS indicates zero; BTC and GCB position indicate "open." 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

. Differential current protection relay will cause the GCB to open, or as a backut 


the differential protection circuit will cause the BTC to open within 


milliseconds. 


. Generator or bus tie contractor unit (BTCU) differential current protection 


or generator over-current protection circuits will cause the GCB and BTC to 


open within milliseconds. 


3. Same as #2 plus the around current relay will cause the GCB to open within 


milliseconds. 



G. Trusk/ H. ROTH 


DATE 8/17/7 


OPERATING MODES 



Rev. 9/26/71 
g operate R ev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

B - TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM-UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 










































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 


FUNCTION OF COMPONENT 


COMPONENT 

page 76 _ 

MAIN 480 VOLT FEEDERS 

FMEANO 6. 6. 2.1 


PROVIDE A PATH FOR THE- FLOW OF 480 VOLT ACCESSORY POWER FROM THE CABLE TRANSITION 


MECHANISM TO THE GENERATOR ACCESSORY ‘UNIT.' • ' - 


failure modes «<effe^s excl tation power available to generator 


loss of some single phase 480 V loads. 


2 Short circuit: Same effect as open circuit; after appropriate 


’otective device clean n 


3 Grounded conductor: Same effect as open circuit after 


riate protective device cleann 


applicable 
OPERATING MODES 




FAILURE FREQUENCY 


failure component 


FAILURE MODE 
MODE NO FREQ % 


COMPONENT MEAN TIME 

FAILURE RATE BETWEEN FAILURE 
x 10 6 PER HOUR (YEARS) 


FAILURE SEVERITY 

MINIMAL 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 
' IV 



>1500 


>3000 


.15 >3000 


FAILURE DETECTION METHODS 

1-3. WTS will shutdown via Failsafe system.. 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 




devices and critical loads". 



OPERATING MODES 



* Rev 

. 9/26/71 

A SHUTDOWN 

D 

TRANSITl ON TO STANDBY 

Rev . 

G OPERATE 

10/25/78 

B - TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 - FEATHER 



































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM . COMPONENT PAGE 77 

NACELLE - EPS AC POWER CABLE TO THE CONTROL SYS, fmeano 6 . 6 . 2.2 

FUNCTION OF COMPONENT 

PROVIDES A PATH FOR THE FLOW OF ACCESSORY POWER FOR OPERATION OF THE CONTROL SYSTEM . 
CABLE RUNS FROM THE CB PANEL IN THE GENERATOR ACCESSORY UNIT TO THE NACELLE CONTROL 


UNIT. 


FAILURE MOOES 8 | EFFECTS .. . _ . . . _. . ITC 

i CaDle is open circuited. Computer becomes inoperative. WTS 

APPLICABLE 
OPERATING MODES 

shuts down. 

All 

2 Cable is shorted to ground. Computer becomes inoperative. WTS 

All 

shuts down. 

3 



4 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

COMPONENT 
FAI LURE RATE 

x 10 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 

1 

75 

.15 

>1000 



X 


? 

25 

.15 

>3000 



X 





- 






FAILURE DETECTION METHODS 


i& 2. Power output from WTS indicates zero. 


2 


3 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

1 A WT S sh u t -do wn will b e initiate d vi a the f a il s a fe . sh u tdown sy . s l em 


OPERATING MODES 

A SHUTDOWN 

B TRANSITION TO WARM UP 
C WARM UP 


NAME G. Trusk/ H - R0TH | dates/ 17/78 

Rev. y/Lb//8 
Rev. 10/25/78 

D TRANSITION TO STANDBY G OPERATE 

E STANDBY H TRANSITION TO FEATHER 

F TRANSITION TO OPERATE I - FEATHER 


78 K 6162-001 



MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 


mnn 


laauiiaKUH 


isua 


COMPONENT l»v* tUNlW I tKKUr I 

CABLE TO THE CONTROL SYSTEM 


page 78 


6 . 6 . 2. 3 


FUNCTION OF COMPONENT > 

PROVIDES A PATH FOR THE FLOW OF UNTNTERRUPTABLE- DC FOR OPERATION OF THE CONTROL SYSTEM. 


.CABLE RUNS FROM THE GENERATOR ACCESSORY UNIT.TO THE NACELLE CONTROL UNIT. 


FAILURE MOOES & EFFECTS 

i Cable is open circuit: ' WTS shuts down 


APPLICABLE 
OPERATING MODES 


FAILURE FREQUENCY 


FAILURE 
FAILURE MODE 
MODE NO FREQ % 


COMPONENT 
FAILURE RATE 

x'10 6 PER HOUR 


5 


MEAN TIME - 
BETWEEN FAILURE 
(YEARS! 


FAILURE SEVERITY 


MINIMAL 




CRITICAL 

CATASTROPHIC 

III 

IV 


FAILURE DETECTION METHODS 

i& 2. Power output from WTS indicates zero. 


3 

- 

** 



DISCUSSION AND CORRECTIVE AC 

1 n rt t iTr _ l -i- 

TION (IF- 
... 1 1 

APPLICABLE) r 

l J .. • ' r • i . r 1 1 1 v , 

4 

* 

iPwi 7 1 1 1 1 p !■> [ > 1? 1 1 

Will 





name .G. TRUSfy H. ROTH 


OPERATING MODES 


A SHUTDOWN 

B - TRANSITION TO WARM UP 
C WARM-UP 


D TRANSITION TO STANDBY 
E STANDBY 

F . TRANSITION TO OPERATE 


G OPERATE . 

H - TRANSITION TO FEATHER 
I - FEATHER 


DATE 8/17/78 


Rev. 9/26/78 
Rev. 10/25/78 


78 K 6162-001 























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

NACELLE - EPS 

COMPONENT 

- POWER CABLE TO THE YAW DRIVE SYS 

PAGE 79 

FMEANO 6. 6. 2.' 

FUNCTION OF COMPONENT 

PROVIDE A PATH FOR THE FLOW OF ACCESSORY POWER FOR OPERATION OF THE i 

'AW DRIVE SYSTEM. 

CABLE RUNS FROM THE CIRCUIT BREAKER PANEL IN THE , GENERATOR ACCESSORY 

UNIT TO THE YAW 


FAILURE MODES & EFFECTS 

i Cable is open circuited. WTS shuts down 


applicable 
OPERATING MODES 


F, 6, H 


F, G, H 



FAILURE FREQUENCY 


COMPONENT 
FAILURE RATE 


- 


FAILURE SEVERITY 

- 

MEAN TIME 
BETWEEN FAILURE 

MINIMAL 1 

MARGINAL 

CRITICAL 

CATASTROPHIC 

(YEAFjS) 

I 

II 

III 

IV 



FAILURE DETECTION METHODS 

i & 2. Power output from WTS indicates zero. 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

Yaw drive hydraulic pump motor does not run or develop sufficient power to 


maintain yaw accumulator pressure. Excessive difference between nacelle 


indicator and w ind s enso rs init iates shutdown 



OPERATING MODES 


i\ev . c u/ /o 

Rev. 10/25/78 

A SHUTDOWN 

D TRANSITION TO STANDBY 

G OPERATE 

B - TRANSITION TO WARM UP 

E STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F - TRANSITION TO OPERATE 

1 FEATHER 


































MOD-2 Failure Mode and Effects Analysis 


component ROWER CABLE TO THE 
PITCH CONTROL SYSTEM . 


SUBSYSTEM 

NACELLE - EPS 


FUNCTION OF COMPONENT 

PROVIDE A PATH FOR THE FLOW OF ACCESSORY POWER FOR OPERATION OF THE PITCH CONTROL 


| page 80 
, fme 'i no 6. 6. 2. 5 


TO THE LOW SPEED SHAFT SLIP RING ASSEMBLY. 


:S St EFFECTS . , , , , . , , . APPLICABLE 

e is open circuited (one or more conductors). WTS shuts operating modes 


down ' - F , G , H 


2 Cable is short circuited to ground (one or more phase .conductor s) . 

WTS shuts down : F, G, H . 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 
mode 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

1 

75 

.15 


MEAN TIME 


FAILURE SEVERITY 


MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 
IV , 



FAILURE DETECTION METHODS 

1 Power output from' 


2 




DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


Loss of pressure causes controls to shut WTS 


ll'/il trll ■ ■ •111 ill ■■ i iTii ■ •« <Ta raT 


1H* M il m aTa I M I I i M liMnl Mil 1 j | 



NAME XRUSK / H. ROTH 


DATE 8/17/78 


OPERATING MODES 



Rev. 9/26/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE Rev. 10/25/78 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C- WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78-K 6162-001 






























■v 


MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 


IMmhikwski 


iuiHia«KUH 


COMPONENT 

GEARBOX OIL HEATERS 


FMEANO .6. 6. 2. 6 


FUNCTION OF COMPONENT _ . 

PROVIDE A PATH FOR THE FLOW OF ACCESSORY POWER FOR OPERATION OF THE LUBE OIL HEATERS 


- IN THE GEARBOX. CABLE RUNS FROM THE CIRCUIT BREAKER PANEL IN THE GENERATOR ACCESSORY 
UNIT TO THE GEAR BOX- ASSEMBLY . 


APPLICABLE 
OPERATING MODES 


D, E, F, G, H 


D, E, F, G, H 


Protective circuitry clears If gearbox oil temp is low WTS will 


BOt enter "operate" mode. 




FAILURE FREQUENCY 


failure 

MODE NO 

failure 
MODE 
FREQ % 

1 

75 

2 

25 


COMPONENT MEAN TIME 

FAILURE RATE BETWEEN FAILURE 

x 10 6 PER HOUR (YEARS) 


.15 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 

' Power output from WTS indicates zero. ' 


2 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

If gearbox oil temperature is low, verify continuity of gearbox heaters and power 


cable. Repair as required. 



* If WTS has been operating, and/or air temp, is high enough to keep oil vescosity 


Tow failure will be "minimal." 


name G. TRUSK / r. ROTH 


DATtS/ 17/78 


OPERATING MODES 



Rev. 

9/26/78 




Rev. 

10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B - TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 



78 K 6162-001 


































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

componentpowER. CABLE TO THE 

PAGE 02 

NACELLE - EPS 

LUBRICATION SYSTEM 

FME A NO 6 6.2,7 


FUNCTION OF COMPONENT 


PROVIDES A- PATH FOR. THE FLOW OF ACCESSORY POWER FOR OPERATION* OF THE LUBRI.CATION SYSTEM 
CABLE RUNS FROM THE CIRCUIT BREAKER PANEL IN THE GENERATOR ACCESSORY UNIT TO THE LUSE 


SYSTEM 

. 

, * 

V 



• 

- 


- 

FAILURE MODES & EFFECTS 

i Cable is ODen circuited (one or more 

conductors! 

. Lube system 

APPLICABLE 
OPERATING MODES 

has redundant wiring and pumps. 

All 

2 Cable is 

<;hnrt circuited to around (one or more 

conductors) 




Prntprt i vp circuitry clears. 1 ubp svstem has redundant, pump. 

All 

3 


- 

- 

> 


4 




* 




. 

e 




FAILURE-FREQUENCY 


FAILURE SEVERITY 

FAILURE 
MODE NO 

failure 
MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

MINIMAL 

‘ MARGINAL 

CRITICAL 
< III 

CATASTROPHIC 
' IV 

l 

75. 

.15 

>1000 

, 

. 

* X 


2 

25 

.15 

>3000 



X 






P 




FAILURE DETECTION METHODS 

- 






- 

i Failure of one pump results in operation 

of backuo 

pump. Periodic maintenance 

detects this change. 

2 







' 

3 

DISCUS = 'ON AND CORRECTIVE ACTION (IF APPLICABLE) 







If both pumps fail loss of. oil pressure 

results in 

WTS shutdown. 


- 


- 



« 





- 










' 

- 

. 

- 














- 


- 



- 

- 









- 


- 





* 


- - 



- 







- 





- 







NAME G 

TRUSK/ h. 

ROTH 


DATE 8/17/78 

OPERATING modes 

A SHUTDOWN 
B TRANSITION TO WARM UP 
C WARM UP - 

D TRANSITION TO STANDBY 
E STANDBY 

F 'TRANSITION TO OPERATE 

7 Rev. H/2B//B 
Rev. 10/25/78 
G OPERATE - Rev. 11/27/78 

_ H TRANSITION TO FEATHER 
1 FEATHER - 


78 K 6162-001 



SUBSYSTEM 

NACELLE - EPS 


FUNCTION OF COMPONENT 


MOD-2 Failure Mode and Effects Analysis' 


E 




PROVIDES A PATH FOR THE FLOW OF ACCESSORY PQWEfl FOR OPERATION OF THE ENVIRONMENTAL 


CONTROL SYSTEM. C /\ BL g RUNS FR0M THE CIRCUIT BREAKER PANEL IN THE GENERATOR ACCESSORY 


UNIT TO THE ENVIRONMENTAL CONTROL SYSTEM. 


FAILURE MODES & EFFECTS 

i Cable is open circuited (one or more conductors). ECS is 


applicable 
OPERATING MODES 


-es mav exceed allow limit 





FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % , 

-1 & 2 

100 


FAILURE DETECTION METHODS *" 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

Will be inspected at 2 month intervals. 


* WTS will- shut down if temperature falls or rises to 



date 8/17/78 


OPERATING MODES 


J * 

Kev. y/zb//a 

A SHUTDOWN 

D 

TRANSITION TO STANDBY t 

Rev. 10/25/78 

G - OPERATE 

8 - TRANSITI ON TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 - FEATHER 

























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

NACELLE - EPS 

component' POWER CABLE TO THE 
ELECTRICAL FACILITIES EQUIPMENT * 

PAGE 84 

FMEANO 6. 6. 2. 9 

FUNCTION OF COMPONENT 

PROVIDES A PATH FOR THE FLOW OF ACCESSORY POWER FOR THE OPERATION OF 

THE ELECTRICAL 

FACILITIES LOCATED IN -OR* ON THE NACELLE:, CABLE RUNS. FROM THE CTRCUI' 

r BREAKER PANEL 

IN THE GENERATOR ACCESSORY UNIT TO LIGHTS, CONVENIENCE OUTLETS AND AIRCRAFT WARNING LT: 


DES.& EFFECTS , , 

e‘is open circuited (one 


function is inoperative (lights 


2 Cable is short circuited to < 


or more conductors). Affected 


or portable equipment). 


iround (one or more-conductors). 


APPLICABLE 
OPERATING MODES 




FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 

mode 

FREQ % 

COMPONENT 
FAILURE RATE 

x IT) 6 PER HOUR 

1 & 2 

100 

.15 * 


MEAN TIME 
TWEEN FAILU 
(YEARSI 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 

i Function (lights or portable equipment) is inoperative. 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

Replace fuse/reset appropriate ci rcui t .breaker, repair as required 



OPERATING MODES 


Rev. 
Rev . 

G- OPERATE 

9/26/71 

10/25/71 

A SHUTDOWN 

D TRANSITION TO STANDBY 

B - TRANSITI ON TO WARM UP 

E STANDBY 

H - TRANSITION TO FEATHER 


C WARM-UP 

F - TRANSITION TO OPERATE 

1 FEATHER 

































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

' NACELLE' r EPS 


COMPONENT >■ 

UNINTERRUPTIBLE power feeders 


page 55 ~ 

FMEA°NO 6.6.2. 10 


FUNCTION OF COMPONENT 


‘MECHANISM TO THE GENERATOR ACCESSORY UNIT. • ' 1 ’ . 

‘ * „ v fc ’ ~ r 

FAILURE MODES & EFFECTS . , _ . , , 

i Cable is opetv circuited. Emergency WTS shut down. 

APPLICABLE 5 

OPERATING MODES. 


F, G, H • 

2 Cable is short circuited to 'qround.' Protective devices clear, 

F, G/ H • 

emergency 'WTS shut down. 

3 • f 


' 

A . 

. 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

failure 
MODE NO 

failure 

MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

MINIMAL 

r 

MARGINAL 
1 1 

CRITICAL 

III 

CATASTROPHIC 

IV 

1 

75 

.15 

•>1000 

- 


X 


2 

25 

.15 

• >3000 



X 




. . 

~ 

■ ■ 





FAILURE DETECTION METHODS 

i & 2, Power output from WTS indicates zero. 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


name G. TRUSK/ H. ROTH 


| date 8/17/7^ 

~R~ 9/27775 
Rev. 10/25/78 


OPERATING MODES 


A SHUTDOWN 

B - TRANSITION TO WARM UP 
C- WARM UP 


D TRANSITION' TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 
H - TRANSITION TO FEATHER 
I -FEATHER 


78-K 6162-001 



SUBSYSTEM 

NACELLE - EPS 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT ' " - PAGE gg ‘ 

GENERATOR CONTROL CABLE fme a no 6. 6.3.1 


FUNCTION OF COMPONENT 

PROVIDES a path for the flow of generator excitation current and generator winding 


TEMPERATURE SIGNALS BETWEEN THE GENERATOR AND THE GENERATOR ACCESSORY UNIT. 


FAILURE MODES & EFFECTS . , 

i A conductor in cable is open circuited. Temperature data lost 


and/or aenerato 


APPLICABLE 
OPERATING MODES 



FAILURE SEVERITY 

U 

MINIMAL 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE FREQUENCY 

FAILURE p... , JRE date MEANTIME 

FAILURE MODE fAlumt nAic BETWEEN FAILURE 
MODE NO FREQ % x 10"° PER HOUR (YEARS) 


>15 


D 


FAILURE DETECTION METHODS 


i For temperature - no remote display. For excitation - GCB and BTC tripped, power 


rom WTS indicates zero. 


3 & 2 GCB and BTC tripped, power from WTS indicates zero. 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 


A SHUTDOWN 

B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANS ITI ON TO OPE RATE 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


DATE 8/17/78 


Rev. 9/27/78 
Rev. 10/25/78 



































MOD-2 Failure Mode and Effects Analysis 


component . control CABLE TO THE PAGE 87 
GENERATOR ACCESSORY UNIT fmeano 6. 6. 3. 2 


FUNCTION OF COMPONENT 

PROVIDES A PATH FOR THE FLOW OF COMMANDS AND OPERATIONAL DATA BETWEEN THE NACELLE 


CONTROL UNIT AND THE GENERATOR ACCESSORY UNIT. . 


SUBSYSTEM 


lilaHlIiaiM 


iLUR^MODE|8.E|FECTSn cab1e 1$ ope n-ci rcui t. WTS shuts down. 


Two or more conductors in cable are shorted together. WTS 


shuts down. 


3 A conductor with a control function is short-circuited to groun 


;s down 


ductor carrying operational data is short-circuited to 


APPLICABLE 
OPERATING MODES 

F, G, 

H 


7 

F,G, 

H • 


» U 

FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

1 


.15 

> 1500 

-2 

mm 

.15 

> 3000 

mm 

25 

.15 

> 3000 



FAILURE SEVERITY 

MINIMAL 

1 

„ MARGINAL 
II 

CRITICAL 

ill 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 

1-4 Power output from WTS indicates zero, BTE is tripped. 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

1-4. Either the generator field enable signal will not enable the field current 


rel ay, inhibiting excitation of the generator or a zero power signal 


enerator output will prevent closing the BTC or cause it to trip. 



TRUSK/ H. ROTH 


date 8/17/78 


OPERATING MODES 



Rev. 9/27/78 

A SHUTDOWN 

D 

TRANSITI ON TO STANDBY 

G OPERATE ^ ev ' I0/25//8 

B TRANSITION TO WARM UP 

E 

STANDBY 

H - TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 
































✓» 


MOD-2 Failure Mode and Effects- Analysis. « 


SUBSYSTEM 

NACELLE - EPS 

COMPONENT 

CONTROL ’CABLE TO THE ROTOR 

PAGE 58 

FMEA NO 6 - 6 .' 3 - 3 

FUNCTION OF COMPONENT 

PROVIDES A PATH FOR THE FLOW OF CONTROL SIGNALS AND OPERATIONAL DATA 

BETWEEN THE NACEL1 

CONTROL UNIT AND THE LOW SPEED SHAFT-SLIP RING ASSEMBLY. 



FAILURE MODES.& EFFECTS ,, , , . .. . * , - .. 

i A conductor in- the cable is open-circuited. Loss of associated 


command function or data. * 


' APPLICABLE 
OPERATING MODES 


F. G, H 


2 Two or more conductors are shorted together. Loss of associate ^ 
command function on erroneous data. * 


F, G, H 


3 A conductor in the cable is short-circuited to ground. Loss 


of associated command function or erroneous data: * 


F » G, H 


FAILURE FREQUENCY 


FAILURE 
MODE NO 


failure 

MODE 
FREQ % 


COMPONENT » 
FAILURE RATE 

X 10 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE SEVERITY 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL 

111 


CATASTROPHIC 
IV " 


50 


..15 


>1 500 


25 


.15 


> 2000 , 


25 


.15 


>3000 


FAILURE DETECTION METHODS. 


i - 3 None until UTS shuts down or fails to deliver power. 


2 


3 - , 

DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

* See FMEA- sheets 7 .7. 13 .through 7.7.26 

Failsafe system in-it-iates shutdown if necessory. 


* MTS may be shutdown or control function may be locked out- or improper commands 
are issued which ultimately would lead to WTS shutdown. 


*• 



NAME. 

G. TRUSK /H- 

Roth 

DATE8/17/78 

OPERATING MODES 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

Rev. 9/28/7S 
Rev. 10/25/78 

B - TRANSITION TO WARM-UP 

E 

STANDBY 


H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 - FEATHER 


1 


78 K 6162-001 
































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

NACELLE - EPS 

CONTROL CABLE 


FUNCTION OF COMPONENT 

PROVIDES A PATH FOR THE FLOW OF CONTROL SYSTEM OPERATIONAL DATA BETWEEN THE NACELLE 


CONTROL UNIT AND THE NACELLE MOUNTED WIND SENSOR. 


FAILURE MOOES & E.FFECTS 

i A conductor in cable is open-circuited. Wind data is lost from 


one sensor. WTS shuts down 


2 A conductor in cable is short circuited to another conductor. 


Wind data is lost from one sensor. WTS shuts down. 


3 A conductor in cable is shorted to around. Wind data is 


APPLICABLE 
OPERATING MODES 

E, F, 

G, H, I 

Ll_ 

LU 

G, H, I 

E, F, 

G. H, I 



FAILURE FREQUENCY 


FAILURE 
MODE NO 



COMPONENT MEANTIME 

FAILURE RATE BETWEEN FAILURE 
x 10 6 PER HOUR (YEARS) 

.15 


.15 


.25 


FAILURE SEVERITY 

MINIMAL 

1 

marginal 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 

> NCU detects wind sensor difference between 

two sensors. 

2 


3 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 



which causes the WTS to be shut down in the 

lockout mode. 



OPERATING MODES 




Rev. 9/28/71 
Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

-B TRANSITION TO WARM UP 

E 

STANDBY 

H - TRANSITION TO FEATHER 

C WARM-UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 































SUBSYSTEM 

NACELLE - EPS 


FUNCTION OF COMPONENT 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

CONTROL CABLE TO THE TOWER 


PAGE 90 
FMEANO 6. 6. 3. 5 


S AND OPERATIONAL DATA 



FAILURE MOOES & EFFECTS 

i Wire in cable is open 

circuited. WTS may shut down, fail to 

connect WTS to utiliti 

i , or not shut down when required. 

2 Wire in cable is shorl 

t circuited to ground. Same effect as No. 1 


3 Wires in 


ffect as No. 1 



failufie frequency 


failure failure rate 

FAILURE MODE FAILUhchaic 

MODE NO FREQ % x 10 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE SEVERITY 


MARGINAL 



FAILURE DETECTION METHODS 


i-3 Loss of manual control; WTS shutdown if critical systems involved. 



FAILURE CAUSE AND CORRECTIVE ACTION.IIF APPLICABLE) 

* Manual command "auto/shutdown" or status signals originating at the base may 


not be received by control equipment in the nacelle. Commands originating in 


"utility bus tie disconnect"). If failure occurs while WTS is in the operate 


mode and "utility bus tie disconnect" command cannot be sent via the control 


system, the EPS "directional power" relay will trip the BTC when power reverses 


due to low or no wind; generator in the nacelle is protected from damage b' 


protection devices located in, and controlled by .circuits within the nacelle 



G. TRUSK/H. ROTH 


OPERATING MODES 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

Rev 

Rev. 

feat$£i¥ • 

mm 

1 1/27/78 

B 

TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO 

. C 

WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 






































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

NACELLE - EPS 

COMPONENT 

CONTROL CABLE TO THE GEAR BOX 

PAGE 91 

FMEANO 6 . 6 . 3 . 6 

FUNCTION OF COMPONENT 

PROVIDES A PATH FOR THE FLOW 

OF STATUS AND PERFORMANCE INFORMATION FROM 

THE GEARBOX TO THE NACELLE CONTROL UNIT 


is open circuited: WTS may shut down. 



3 Wires in cable are short circuited: WTS mav shut down. 


APPLICABLE 

OPERATING MODES 

F, G, 

H 

F, G, 

H 

F, G, 

H 



MEAN TIME 
BETWEEN FAILURE 
(YEARS) 



FAILURE FREQUENCY 


failure mode JRE fai ^ rerate 

MOPE NO FREQ % x 10"° PER HOUR 


50 


25 


FAILURE DETECTION METHODS * 


i-3 If WTS shuts down, power output indicated is zero. 


21-3 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 


FAILURE SEVERITY 

MINIMAL 

MARGINAL 

CRITICAL 

Ml 

CATASTROPHIC 

IV 


■l lil^J imi I • ■ • ■ ■Aj m i 1 pf; ■ m ■ • r; ■ mma r:»» 






excessive vibration or excessive low speed bearing temperature. 



2 WTS shuts down due to interpretation that data indicates rotor speed is excessive. 


If fault is on vibration or bearing temperature circuits, redundant signals are 


provi ded to maintain data integnt 


* See FMEA 7.7.7 through 7.7.12 


na ^e G. TRUSK/H. ROTH 


DATE 8/17/78 


OPERATING MODES 



Rev 10/12/78 
Rev 10/25/78 

A SHUTDOWN 

D TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F - TRANSITION TO OPERATE 

1 FEATHER 



78-K 6162-001 REV 1 

































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

NACELLE - EPS 

component CONTROL CABLE TO 
THE LUBRICATION SYSTEM' 

PAGE 92 

FMEA NO 6. 6. 3. 7 

FUNCTION OF COMPONENT 

* 




MMiM Vilit fil \] 4 1 1 ' 1 1 I'M 1 1 i 11 1 ' in 1 > i 1 



3 Wires in cable are short circuited: WTS may shut down 


F, G, H 


F, G, H 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

F'AI LURE RATE 
x 10" 6 PER HOUR 

1 

50 

.15 

2 

25 

.15 


MEAN TIME 
BETWEEN FAILURE 
I YEARS) 


MINIMAL 

I 


FAILURE SEVERITY 


MARGINAL CRITICAL CATASTROPHIC 

II III IV 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

Pump on/off commands may not be obeyed if command wires are faulted. 


If status wires are faulted, WTS may shut down because data erroneously' is 


interpreted to mean one of the following: excessive particles in lub oil. 


oil overtemperature, oil filter restricted or oil level is low. Oil pum 


may be erroneously commanded on or off. 



* Depends upon which wire(si faulty for details. See FMEA 7. 7. 2. 8.- 7. 7. 3. 5. 


name g. TRUSK/H. ROTH 


DATE 8/17/78 


OPERATING MODES 



Rev 

10/12/78 

A SHUTDOWN 

D 

transition to standby 

G OPERATE ^ eV 

1 0/25/78 

8 transition to warm up 

E 

STANDBY 

H TRANSITION TO FEATHER 


c warm up 

F 

TRANSITION TO OPERATE 

1 FEATHER 






































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

NACELLE - EPS 


component .CONTROL CABLE TO THE 
YAW DRIVE SYSTEM 


page 92.1 
FMEANO 6. 6. 3. 8 


FUNCTION OF COMPONENT 

PROVIDES A PATH FOR THE FLOW OF COMMANDS AND OPERATIONAL DATA BETWEEN THE NACELLE 
CONTROL UNIT AND THE YAW DRIVE SYSTEM CONTROLS. 


FAILURE MODE&& EFFECTS . . . , 

i Wire in cable is open circuited: WTS shuts down or hydraulic. 


pump cannot be turned on or off. 


APPLICABLE 
OPERATING MODES 


F, G, H 


Wire in cable is short circuited to ground: same effect as #1 

plus nacelle may yaw left or right. 


-F-, G,.H 


3 Wires in cable are short circuited: no data monitored on 


shorted wires or hydraulic motor cannot be turned on or off or 
nacel le may yaw right or left. 




j FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

failure 

MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

MINIMAL 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 

1 

50 

1.1 

2QQ 



X 


2 

25 

1.1 

400 

- 


X 


3 

25 

1.1 

400 

• 


X 


4 








FAILURE DETECTION METHODS 


i-3 WTS shuts down. Manned substation receives alarm. On site data review will 


identify problem circuit, inspection is required to pinpoint specific problem. 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 


See FMEAs 7.7.50 through 7.7.62. 


name h. ROTH 


date iq/12/78 


OPERATING MODES 


Rev 10/25/78 


A SHUTDOWN 

B TRANSITION TO WARM UP 
C WARMUP' 


D TRANSITI ON TO STANDBY 
E STANDBY 

F TRANS ITI ON TO OP E R ATE 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78 K -6162-001 REV 1 



MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT (D 

NACELLE - EPS SLIP RING BRUSH ASSEMBLY TRAIN) 


FUNCTION OF COMPONENT 

PROVIDES THE STATIONARY PORTION OF THE PATH FOR THE FLOW OF ELECTRICAL POWER AND 


SIGNALS BETWEEN THE NACELLE AND THE DRIVE TRAIN. ALSO PROVIDES A PROTECTED 


ELECTRICAL JUNCTION FOR INCOMING NACELLE CABLES 


FAILURE MODES & EFFECTS 
1 




Conductive path between brush and structure or case 


failure freouency 


APPLICABLE 
OPERATING MODES 




FAILURE SEVERITY 



failure 

MODE 
FREQ % 

FAILURE RATE 
x 10 -6 PER HOUR 

98 

37.6 

1 

37.6 

1 

37.6 


BETWEEN FAILURE MINIMAL MARGINAL CRITICAL CATASTROPHIC 



FAILURE DETECTION METHODS 


i -4 Inspection and continuity tests 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 


See FMEA sheets 7.7.13 through 7.7.26 and 6.6.3. 3 


Total for al 1 signals 



NAME G. TRUSK/H. .ROTH 


DATE 8/ 17/78 


OPERATING MODES 



Rev 10/12/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE ^ eV 1 0/25/ /8 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

NACELLE - EPS 

COMPONENT 

GENERATOR CIRCUIT BREAKER (GCB) 

PAGE 94 

FME A NO 6.8.1 

FUNCTION OF COMPONENT 




THE GENERATOR 


FA ' ^re^er S contacts cannot be closed, UTS cannot enter operate 
mode. 


m 


2 Breaker contacts cannot be opened, generator may carr 


excessive fault currents 


3 Breaker contacts have hi 


causes 


applicable 
OPERATING MODES 


E, 


F, G, H 


F, G, H 



FAILURE FREQUENCY 

failure 
MODE NO 

failure 

mode 

FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 


FAILURE SEVERITY 


BETWEEN FAILURE MINIMAL 

(YEARS) I 


MARGINAL 

II 


CRITICAL CATASTROPHIC 

III IV 


2 

25 

3 

50 



failure detection methods 


i Generator circuit breaker position indicator indicates open 


2 Generator circuit brea ker position indicator indicate s closed , zero power output. 


3 None-o 


FAILU 

IRE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 


l 


■*•] iiittrsTM isinikmi ii* w iiiiii 

dependable. 



name G. TRUSK/H. ROTH 


DATE8/18/78 


OPERATING MODES 




Rev 10/12/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

Rev 10/25/78 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 
































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

NACELLE - EPS 

VOLTAGE REGULATOR 



FUNCTION OF COMPONENT 

10 V IDES AND CON TROLS DC POWER TO THE GENERATOR EXCITER 


FAILURE MODES& EFFECTS 

i Output voltage is zero: GCB & BTC trip. WTS shuts down. 


APPLICABLE 

OPERATING MODES 

F, 

G, H 

F, 

G, .H 

A 

Ll- 

G, H 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


After BTC closure: Loss of excitation protection trips GCB. 


After BTC closure: Power factor becomes more leading, either power factor 


G.'> TRUSK / H. Roth date 8/17/78 


PERATING MODES 



REV. 

10/9/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE REV. 

10/25/7E 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 1 

1 FEATHER 




























COMPONENT 

POWER FACTOR CONTROLER (PFC) 


MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

NACELL EPS 


FUNCTION OF COMPONENT 

PROVIDES A FEEDBACK CONTROL SIGNAL TO THE VOLTAGE REGULATOR TO MAINTAIN A CONSTANT 


OUTPUT POWER FACTOR FROM THE GENERATOR. 


PAGE gg 

FMEANO 6. 8. 2. 2 


FAILURE MODES & EFFECTS 
1 


(•■l.n’IlllKLl 


APPLICABLE 
OPERATING MODES 



3 THE PFC PROVIDES TOO SMALL A SIGNAL TO THE VR: PF IS GREATER 


THAN DESIRED, SE 




FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 

MODE - 
FREQ % 

FAILURE RATE 
x 10- 6 PER HOUR 

ufeftii 

100 

22.8 


FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 



MARGINAL 

CRITICAL 

CATASTROPHIC 

II 

111 

IV 



FAILURE DETECTION METHODS 


NO DETECTION OF FAILURE UNTIL CERTAIN ELECTRICAL PARAMETERS SUCH AS 


DIFFERENTIAL CURRENT OR OVER-CURRENT ARE EXCEEDED. 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

1-3 UNDER NORMAL WIND CONDITIONS NO PROBLEMS ARE ENCOUNTERED, THE VR PROVIDES 


SUFFICIENT CONTROL; HOWEVER, IF HIGH WIND GUSTS ARE PRESENT THE GENERATOR 

MAY SLIP A POLE AND EITHER DIFFERENTIAL CURRENT OR OVER-CURRENT PROTECTION 

CIRCUITS WILL INITIATE WTS SHUT DOWN. IF A POLE IS NOT SLIPPED THERE WILL 

BE KNOWLEDGE THAT PF IS EXCESSIVE. 

2&3 IF PF IS OUT-OF-TOLERANCE, IT. IS NOT DETECTED AND MAXIMUM REAL POWER IS 


NOT AVAILABLE FROM THE WTS. 


> 

UNDER GUSTY WIND CONDITIONS THE 

GENERATOR PULL-OUT TORQUE MAY BE EXCEEDED 


CAUSING THE GENERATOR TO SLIP A 

POLE WITH ATTENDANT VERY HIGH UNBALANCED PHASE 


CURRENTS, WTS MAY SHUT DOWN. 

^ WTS SHUTS DOWN IF CURRENTS EXCEED 


DATE 8/17/78 


OPERATING MODES 



Rev 

Rev. 

i sm 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 






























MOD 2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 





hUNC I I UN Ul- L UMrUNc N I 

ROVIDES A DIRECT MEANS_0F ENABLING AND DISABLING THE GENERATOR EXCITATION. 


FA rma E ?fs EF c%Ted; excitation current cannot be removed from the 

generator field windings 

2 FCR fails open, generator cannot be excited 


APPLICABLE 
OPERATING MODES 


G 


F, G, H 



FAILURE FREQUENCY 

FAILURE COMPONENT MEANTIME 

FAILURE MODE FAILURE RATE BETWEEN FAILURE 


MODE NO FREQ % 


20 


x 10 PER HOUR 


(YEARS) 


FAILURE SEVERITY 

MINIMAL 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 

i Generator output power present, BTC* indicates open. 


2 Generator power indicates zero power, BTC* indicates open. 




78 K 6162-001 






















MOD-2 failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

page98 

NACELLE - EPS 
M ^ 

OVER VOLTAGE RELAY 

FME A NO 


6.8.3. 


FUNCTION OF COMPONENT 

'ONITQRS THE GENERATOR OUTPUT VOLTAGE AND PROVIDES A SIGNAL TO THE CONTROL SYSTEM^ ITIATlIjG 



failure frequency 

X 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

/ FAILURE SEVERITY 

FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

n 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 

1 

n 

3.4 

42 / 

■5 




2 

E9i 

-3.4 

168 / 

HI 

S 

\ 

x 





/ 


\ 

\ 


- 


AILURE DETECTION METHODS 

1 None 


GCB and 8TC position indicates open 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) N 

V o l ta ge while , on 1 me co ntr ol l ed b y u tility buss. — I- f ..o. v .eE-exc3.ta t io n o c c u r^w h i . le 
jn /fine, over temp sensors will initiate shutdown. 































name RnTH/ G. TRUSK 


date 8/17/78 


-ERATING MODES 


A SHUTDOWN 

B - TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


Rev. 9/25/78 
g operate Rev. 10/25/78) 

H TRANSITION TO FEATHER 
I FEATHER 


78 K 6162-001 





















SUBSYSTEM 


FUNCTION OF COMPONENT 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 


iiiNftidraauaiiiiaNftWJav^ 



GENERATOR OUTPUT VOLTAGE AND PROVIDES A SIGNAL T0‘ TRIP THE GENERATOR CIRCUIT 


POWER OUTPUT FREQUENCY FALLS BELOW A PRESET LIMIT. 


FAILURE MODES & EFFECTS 

i Under frequency relay fails open. No effect. 


•- 2 Under frequency relay fails closed. GCB trips and WTS shuts down. 


APPLICABLE 
OPERATING MODES 


F, G, H 



FAILURE FREQUENCY 

j 

, 

failure 
MODE NO 

FAI LURE 
MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 >ER HOUR 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

1 

80 

3.4 

42 ' 

2 

20 

3.4 

168 


FAILURE SEVERITY 


MARGINAL CRITICAL CATASTROPHIC 

II III IV 



FAILURE detection methods 
1 


GCB and BTC position indicates open. 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

1. Uider frequency caused b 




system. If on-line, utility buss controls frequency, any fluctions would be due to 
loss of utility power, initiating shutdown. 


NAME H. R0TH6. TRUSK 


jPERATING MODES 


A SHUTDOWN 
B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


DATE 8/ 17/78 


l r 1 


Rev. 10/25/78 

G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78 K 6162-001 













. SUBSYSTEM 

NACELLE - EPS 


FUNCTION OF COMPONENT 


MOD 2 Failure Mode and Effects Analysis 


COMPONENT 

OVERCURRENT RELAY 


PAGE 100 
fmeano 6.8. 3.3 


RRE NT AN D PROVIDES A SIGNAL TO TRIP THE GENERATOR CIRCUIT 
T CURRENT EXCEEDS A PRESET LIMIT. ' ~ 


FAILUFIF ruinnec «. ' 

i Overcurrent relay fails open: No effect 


APPLICABLE 
OPERATING’ MODES 


2 Overcurrent relay fails closed. GCB trips and'WTS shuts down. 



FAILURE FREQUENCY 

failure 
MODE NO 

failure 

MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

1 x 10 6 PER HOUR 




FAILURE SEVERITY 


MINIMAL 

MARGINAL 

1 

ii 


- 



CATASTROPHIC 

IV 


'AILURE DETECTION METHODS 

i None ' 



DERATING MODES 


A SHUTDOWN 
B - TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


H. ROTH/ 2. TRUSK 


rev. 9/25/78 
rev. 10/25/7 

G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


















MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT 

NACELLE-EPS REVERSE POWER RELAY 


FUNCTION OF COMPONENT 

MONITORS THE GENERATOR OUTPUT POWER AND PROVIDES A SIGNAL TO TRIP THE GENERATOR 


CIRCUIT BREAKER WHEN THE GENERATOR OUTPUT POWER FALLS TO A LEVEL WHERE THE POWER 


page ioi 

FMEANO 6. 8. 3. 4 


FLOW MAY REVERSE. 


APPLICABLE _ 
OPERATING MODES 



FAILURE FREQUENCY 

failure 
MODE NO 

failure 
MODE 
FREQ % 

FAILURE RATE 
x 10- 6 PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE DETECTION METHODS 


CATASTROPHIC 

IV 




FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 

■ 

Rev. 9/8/78 

G OPERATE ^ eV> 10/25/78 

A SHUTDOWN 

D TRANSITION TO STANDBY 

B TRANSITION TO WARM UP 

E . STANDBY 

H TRANSITION TO FEATHER 

C WARM UP ' 

F TRANSITION TO OPERATE 

1 FEATHER 





























SUBSYSTEM 

NACELLE - EPS 


I FUNCTION OF COMPONENT 


MOD 2 Failure-Mode and Effects Analysis 


COMPONENT 

GROUND CURRENT RELAY 


PAGE 102 

FMEANO 6. 8. 3. 5 


W I TORS THE GENERATOR OUTPUT CURRENT FLOW IN THE NEUTRAL LINE TO GROUND AND PROVIDES A 


SIGNAL TO TRIP THE GENERATOR CIRCUIT BREAKER WHEN THE CURRENT FLOW RISES TO A PRESENT 


LEVEL TO INDICATE AN ELECTRICAL FAULT. 


failure mode s & effects „ 

i GCR fails open. No effect 


APPLICABLE 
OPERATING MODES 



AILURE DETECTION METHODS 

1 None - Requires periodic check 


2 GCB and BTC position indicates open 



GL TRUSK/H ROTH date 8/17/78 


PERATING MODES 


A SHUTDOWN 
B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


Tawiniui;! 


Rev. 10/25/78 

G OPERATE 

H TRANSITION TO FEATHER 
I - FEATHER 


78 K 6162-001 





















SUBSYSTEM 

NACELLE - EPS 


FUNCTION OF COMPONENT 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

DIFFERENTIAL PROTECTION RELAY 


PAGE IO 3 
FMEA NO 6 . 8 . 3 . 6 


ON I TORS THE DIFFERENTIAL CURRENT FLOW IN THE VARIOUS BRANCHS OF THE GENERATOR STATOR 
I W INDING AND PROVIDES A SIGNAL TO TRIP THE GENERATOR CIRCUIT BREAKER WHEN TH E DIFFERENTIAL 
CURRENT EXCEEDS A PRESET LIMIT TO INDICATE A FAULT WITHIN THE DIFFERENTIAL PROTECTION ZONE 


FAILURE MODES $ EFFECTS 

1 DPR fails open, no effect 


APPLICABLE 
OPERATING MODES 


2 DPR fails closed, WTS shuts down 




FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAI LURE 
MODE 
FREQ % 

COMPONENT 
FAI LURE RATE 

x 10 6 RER HOUR 

MINIMAL 

marginal 

11* 

CRITICAL 

III 

CATASTROPHIC 

IV 





Al LURE DETECTION METHODS 

1 None - Requires periodic checks 



OPERATING MODES 


A SHUTDOWN 

B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


ev. 

Rev. 10/25/78 

G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78 K 6162-001 


















SUBSYS1 E M 

NACELLE 



MOD 2 Foiluie Mode and Effects Analysis 


component GENERATOR WINDING 
OVER TEMPERATURE RELAY (OTR) 



CTlON OF COMPONENT 


r j THE TEMPERATURE SIGNAL OF EACH GENFRATOR FIELD WINDING AND PROVIDES A SIGNAL- TO THE 


CONIROL SYSTEM INITIATING A SHUTDOWN WHEN ANY WINDING EXCEEDS A PRESET LIMIT. 


FAILURE MODFS& EFFECTS 

i Relay fails open: 


MUWJUtswiMiMWMiniraiWmTiiiniiiijt.-a 


APPLICABLE 
OPE RATING MODES 


resulting in eventual destruction of interwidinq insulation and massiv 


& internal fault currents , 


2. Relay fails closed: WTS shuts down 



FAILURE FREQUENCY 


failure 
failure mode 

MODE NO FREQ % 


COMPONENT 
FAILURE RATE 

* 10 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


FAILURE SEVERITY 


MARGINAL 

II 




•u. DETECTION METHODS 


i & 2. GCB & BTBS open, power output from WTS indicates zero. 



DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 

T. Excessive winding temperatures are caused by either internal or external faults that 


should be sensed by over-current, differential current or ground current protective 


curcuits that trip the GCB and cause WTS shut-down. Once the generator is shut-down 


via the OTR the control system will prevent re-enabling the generator exitation until 


the winding temperature is within acceptable limits. 



I 1* only if backup protection devises fail (i.e.. Over-current, differential current, or 


jround fault) (Less than .1% chance per 30 name >H. ROTH date 9/27/78 


I derating modes years). 


A SHUTDOWN 

B - TRANSITION TO WARM UP 
C WARM UP 


D - TRANSITION TO STANDBY 
E STANDBY 

F - TRANSITION TO OPERATE 


G OPERATE 

H - TRANSITION TO FEATHER 
I - FEATHER 


78 K -6162-001 

















MOO-2 Failure Mode and Effects Analysis 


subsystem WOT5r BEARING OVERTEMPERATURE 

NACELLE - EPS pci av 


FUNCTION OF COMPONENT 

Provides a signal to the control system to shutdown the WTS if a bearing over- 


temperature signal is received from the temperature sensors. 


PAGE 103.2 

FMEANO 6. 8. 3. 8 


' EUR ^y° ES | ! a e 1 F ] : I C Qpen; Generator may operate with overheated bearing ; 
resulting in eventual destruction of the bearing. 1* 


2 Relay fails closed: WTS shuts down. 


APPLICABLE 
OPERATING MODES 


G 



FAILURE FREQUENCY 

1 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

1 

FAILURE severity 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREO % 

FAILURE RATE 
x lO" 6 PER HOUR 

MINIMAL 

MARGINAL 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


1 None remote 1 


ower output from WTS indicates zero. 



is loss of l ubric ant. Control 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

The most probable cause for an overheated be 


system has redundant inputs to effect normal shutdown or failsafe shutdown in 


the event of gene 


1* Bearing may seize and cause significant- damage to the structure. This would 



H. ROTH 


date 9/27/78 


OPERATING MODES 


5 

Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANOBY 

H TRANSITION TO FEATHER 

C - WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 





























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

NACELLE - EPS 

COMPONENT 

LOSS OF EXCITATION RELAY 


page to3.3 

FMEANO 6.8. 3. 9 

FUNCTION OF COMPONENT 

Provides a means to trip the generator circuit breaker when 

excitation power 

to the generator field is lost. 





FAILURE MODES & EFFECTS , 

i Open circuit: Relay does not operate 


2 Relay does not issue GCB trip signal 


3 Relay issues GCB trip signal premature! 


APPLICABLE 
OPERATING MODES 




FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

MINIMAL 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 

1 & 2 Damage may occur to the generator if excitation is lost and GCB is not 


to remove the generator from the system 



OPERATING MODES 



Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G - OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 





























COMPONENT 

POWER FACTOR RELAY 


PAGE 103.4 
FMEA NO 6.8.3.10 


MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

NACELLE - EPS 


FUNCTION OF COMPONENT 

Provides a means to signal the control system to shut down if the power factor 


exceeds preset limits 


FAILURE MODES & EFFECTS . APPLICABLE 

i Relay does not operate: Power, factor may exceed tolerable level operating modes 


2 Relay operates prematurely: Frequent unnecessary shut downs 



FAILURE FREQUENCY 

failure 

MODE NO 

failure 
mode 
freq % 

FAILURE rate 
x 10 -6 PER HOUR 


failure severity 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL CATASTROPHIC 

III IV 



FAILURE DETECTION METHODS 


i WTS Shut Down When Generator' Overtemperature Limits Are Exceeded. 


2 WTS SI in 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Rev 10-25-78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G - OPERATE 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C - WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 































MOD-2 Failure Mode and Effects Analysis 


BEARING UNDERTEMPERATURE 
RELAY 


SUBSYSTEM 

NACELLE - EPS 


FUNCTION OF COMPONENT 

PROVIDES A SIGNAL TO THE CONTROL SYSTEM FOR INHIBITING START-UP OF THE WTS WHEN THE 


GENERATOR BEARING TEMPERATURE IS TOO LOW. 


FAILURE MODES & EFFECTS . , , . . ^ , 1T _ 

i Relay contacts stuck open: WT.S rotor will not rotate or WTS 


will shut down. 


Relay contacts remain closed: Generator may be rotated without 


lubrication. (Double failure) 


APPLICABLE 
OPERATING MODES 


F, G, H 


G 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 
MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 



80 

3. 

20 

3. 


FAILURE SEVERITY 

MINIMAL 

MARGINAL 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


1 WTS will not start. 



If damage is severe, eventual bearing over-temperature shutdown durin 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 


Normally not detectable since relay contacts should be closed under conditions 


where maintenance 


operability test replace if required. This relay is a backup for the generator 


heater. If' the heater fails, the relay protects the generator. 



date 10-19-78 


OPERATING MODES 



Rev 10-25-78 

A SHUTDOWN 

D 

TRANSITION TO STAND8Y 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 -FEATHER 


78 K 6162-001 REV 1 


































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 




COMPONENT 



PAGE ]Q4 


_lei 

i 

fmean6.8.4.1 


FUNCTION OF COMPONENT 


PROVIDES A 0-115 VOLT SIGNAL PROPORTIONAL TO THE 0-4160 VOLT OUTPUT OF THE GENERATOR*. 


THIS SIGNAL IS USED BY THE GENERATOR PROTECTIVE RELAYS AND THE GENERATOR INSTRUMENTAL 


TRANSDUCERS. ' 


failure^^^^i^ct^ open _ c i rcui ted , no effect 


APPLICABLE 
OPERATING MODES 


Transformer has short-ci rcui ted, windings 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

1 

25 

1.1 

2 

‘ 75 

1.1 


MEAN TIME 
TWEEN FAILU 
(YEARS) 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 

i WTS shutdown 



- 

2 WTS -shutdown 1* 

. 





DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE), 



Potential transformers are utilized for many .functions- 1) Controls, 2) Voltage 


regulation, 3) Indication devices, 4) Over-voltage protection, 5) Watt-hour 


meters, 6) Watt-meter, and 7) Synchronizer circuits. 



1* If PT is in a control circuit the WTS will shut down due to over-excitation 


name q. TRUSK / H ROTH |date8/ 17/78 


OPERATING MODES 


A SHUTDOWN 

B TRANSITION TO WARM-UP 
C - WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANS ITI ON TO OPERATE 




G OPERATE ReV - W25/78 

H TRANSITION TO FEATHER 
I FEATHER 



78-K 6162-001 



































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

NACELLE - EPS 


COMPONENT 

CURRENT TRANSFORMER ( CT ) 


PAGE TU5 

fmean§'®’4-2 


FUNCTION OF COMPONENJ 

P ROVIDES A 0-5 AMP ANALOG 


SIGNAL PROPORTIONAL TO THE 0-433 AMP GENERATOR OUTPUT LINE 


C IIRRFNT . THIS SIGNAL IS USED BY THE GENERATOR PROTECTIVE RELAYS AND THE GENERATOR 


INSTRUMENTATION TRANSDUCERS. 


FAILURE MODES& EFFECTS 

i Open circuit in the current transformer secondary winding- 
no output from CT 


APPLICABLE 
OPERATING MODES 


2 Short circuit between individual t urns of the current transforme r 
lower output from CT - 


FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
( YEARSI 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 

1 

25 

1.1 

400 



X 


? 

75 

1.1 

133 



X 






- 





FAILURE DETECTION METHODS 

i WTS shutdown 


WTS shutdown 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 


Current transformers are utilized for many functions- 1) Controls, 2) Voltage- 
regulation, 3) Indication devices, 4) Over-current protection, 5) Uatt-hour 


meters, 6) Matt-meter, 7) Ground fault protection, and 8) Differential protection 
circuits. 


NAME 


G TRUSK/ h. ROTH 


date 8/18/73 


OPERATING MODES 


A SHUTDOWN 
B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 
H - TRANSITION TO FEATHER 
I FEATHER 


Rev. 9/25/78 
Rev. 10/25/78 


78 K -6162 -001 


,) 


/ 



MOD-2 Failure Mode and Effects Analysis. 


COMPONENT PAGE ■] gg 

TRANSDUCER fmeano 6. 8. 5.1 


FUNCTION OF COMPONENT 

PROVIDES A 0-1 MA OUTPUT ANALOG SIGNAL FROM THE 0-115 VOLT OUTPUT OF A POTENTIAL 


TRANSFORMER THIS SIGNAL IS PROVIDED TO THE CONTROL SUBSYSTEM AND TO A VOLTMETER DISPL 


SUBSYSTEM 


lillMHiaiiKI 


FAiLURg modes ^En=p^T§n vo -| t a g e transducer. No output from transduc 



2 Short circuit between individual turns of the voltage transducer 


: from transducer. 


3 



FAILURE FREQUENCY 



FAILURE SEVERITY 


FAILURE 
MODE NO 

fai LURE 
MODE 
FREQ % 

COMPONENT 
FAILURE RATE 

x'lO 6 PER HOUR 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

MINIMAL 
1 

MARGINAL ' 
II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 

i & 2. None. Voltage signal is for data purposes only. 


2 


DISCUSSION AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 

A SHUTDOWN 

D 

TRANSITION to standby 

TOT 

Rev. 

G OPERATE 

9 / 25/78 

10/25/78 

B - TRANSITI ON TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 


C-WARM UP 

F 

TRANSITION TO OPERATE 

1 - FEATHER 

































SUBSYSTEM 

NACELLE - EPS 


COMPONENT 

CURRENT TRANSDUCER 


MOD-2 Failure Mode and Effects Analysis 


PAGE 107 

FMEANO 6. 8. 5. 2 


FUNCTION OF COMPONENT 

PROVIDES A 0-1 MA OUTPUT ANALOG SIGNAL FROM THE 0-5 AMP OUTPUT OF A CURRENT 


TRANSFORMER. THIS SIGNAL IS PROVIDED TO AN AMMETER DISPLAY. 


FAILURE MODES& EFFECTS 

i Open circuit: control system or ammeter sense zero current. 


APPLICABLE 
OPERATING MODES 


Short circuited: same as #1. 



TAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

failure 
MODE NO 

FAI LURE 
MODE 
FREQ % 

FAILURE RATE 
x Hf 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

II 

i 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


1 -2 Zero current displayed at WTS site. No remote detection available. 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

Approximate current can be derived from displayed or stored real power data. 



OPERATING MODES 



KtV 1U/18/78 

A SHUTOOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 

























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

NACELLE - EPS 


COMPONENT 

REAL POWER TRANSDUCER 


PAGE 108 

fmeano 6. 8. 5. 3 


FUNCTION OF COMPONENT 

PROVIDES A 0-1 MA OUTPUT ANALOG SIGNAL OF GENERATOR KW OUTPUT BASED ON INPUTS FROM 
POTENTIAL AND CURRENT TRANSFORMERS. -THIS SIGNAL IS PROVIDED TO THE CONTROL SYSTEM 
AND TO A KW METER DISPLAY. 


FAILURE MODES & EFFECTS 

i Output high: WTS shuts down. 


APPLICABLE 
OPERATING MODES 


Output low: WTS shuts down. 


FAILURE FREQUENCY 

mean time 

BETWEEN FAILURE 
(YEARS! 

FAILURE SEVERITY 

FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

MINIMAL 

MARGINAL ' 
II 

CRITICAL 

III) 

CATASTROPHIC 

IV 

1 

100 

1.1 

100 

— 

- 

X 


2 

100 

1.1 

100 



x 


3 



„ 




- 

4 





- 



FAILURE DETECTION METHODS 


i&2 WTS shuts down, zero power output, BTC indicates open. 


1 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 

1. Real power signal ■ is Kiqh. System' o p erates at ' reduced power levels. Detected 

by comparison with other units in far m. . 

2. Real power is low. Control system uses real power data to set the rotor blade 

pitch. WTS shutdown will be initiated when generator protection sensors approach 
overstress limits. 


NAME 


G. TRUSK/H. ROTH 


DATE 8/17/78 

*ET 10/13/ 78 


OPERATING MODES 


A SHUTDOWN 

B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 
H TRANSITION TO FEATl 
I FEATHER 


78 K 6162-001 REV 1 


) 



SUBSYSTEM 

NACELLE - EPS 

FUNCTION OF COMPONENT 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

REACTIVE POWER TRANSDUCER 


PAGE 109 
fmeano 6. 8. 5. 4 


PROVIDES A 0-1 MA OUTPUT ANALOG SIGNAL OF GENERATOR KVAR OUTPUT BASED ON INPUTS FROM 


POTENTIAL AND CURRENT TRANSFORMERS. THIS SIGNAL IS PROVIDED TO A KVAR METER DISPLAY. 


FAILURE MODES & EFFECTS 

i Output hiqn: incorrect on-site displays. 


applicable 
OPERATING MODES 



FAILURE FREQUENCY 

failure 
MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

1 

50 

1.1 

2 

50 

1.1 


FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL 

III 


CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


1.2 No remote detection available. KVAR meter display is not compatible with 


7 voltage, current, power factor and KW meter displays. 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

KVAR's can be derived from other data displayed at site: voltage, current, 


power factor and real power. 



OPERATING MODES 



REV 10/13/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 - FEATHER 


78 K 6162-001 REV 1 




























subsystem 

NACELLE - EPS 

CTlON Of- COMPONENT 


MOD 2 Failuic Mode and Effects Analysis 


COMPONENT 

GENERATOR TEMPERATURE TRANSDUCER 


page 109.1 
F ME A NO 6. 8. 5. 5 


ROVIDES A VARIABLE RESISTANCE PROPORTIONAL TO TEMPERATURE OF THE GENERATOR WINDINGS AND 


SUPPLIES THIS DATA TO THE GENERATOR WINDING OVER TEMPERATURE RELAY. 


FAILURE MODFS & 

EFFECTS 

- 

applicable 

II 


r is o 


OPE RATING MODES 


Transducer is short-circuited: Over temperature relay is activated. 








FAILURE FREQUENCY 


FAILURE SEVERITY 



FAI LURE 
MODE 
FREQ % 

-COMPONENT 
FAILURE RATE 

x 10 6 PER HOUR 

10 

1.1 

80 

1.1 

10 

1.1 


MEAN TIME 
TWEEN FAIL! 
(YEARS) 


CRITICAL I CATASTROPHIC 



JRE DETECTION METHODS 

1-3 GCB is open, BTC is open, power output from WTS is zero. (WTS shutdown initiated prior to 


etacmng generator 



OPERATING MODES 


j REV 10/25/78 , 

A SHUTDOWN 
8 - TRANSITION TO WARM-UP 
C WARM UP 

D - TRANSITION TO STANDBY 
E STANDBY - - 

F - TRANSITION TO OPERATE 

* G- OPERATE 

H TRANSITION TO FEATHER 
!j v. , 1 - FEATHER 


78 K-6 162-001 


























i 


SUBSYSTEM 

NACELLE - EPS 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

ACCESSORY POWER TRANSFORMER 


page 110 
fme a no 6.8.6 


FUNCTION OF COMPONENT 

TRANSFORMS 480 VOLTS TO 115/230 VOLTS TO PROVIDE ELECTRICAL POWER TO 


ACCESSORIES MOUNTED IN THE NACELLE. 


failure modes* effects , , . , . 

i Open circuit: WTS cannot start up nr shut down v.a normal 


control system procedure. 


1 Short circuit: Same as No. 1 


APPLICABLE 
OPERATING MODES 

B, 

C, D, 

E, 

F ,G,H 

B, 

C, D, 

E, 

F.G.H 



FAILURE FREQUENCY 


. 


FAILURE SEVERITY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS! 

MINIMAL 

1 

MARGINAL 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 

1-2 Loss of nacelle 115/230 Vac incapac 


system protection will function from umnterruptable power supply. Shutdown via 


this mode will not result in rotor overspeed beyond design limits. 



name G. TRUSK/H. ROTH 


OPERATING MODES 


A SHUTDOWN 
B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 


DATE 8/17/78 


Rev 10/13/78 
Rev 10/25/78 


H TRANSITION TO FEATHER 
I FEATHER 


78 K 6162-001 REV 1 






















MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

PAGE 111 

NACELLE - EPS 

480 VOLT CIRCUIT BREAKER PANEL 

FMEANO 6.8.7 . T 


FUNCTION OF COMPONENT 


PROVIDES FOR THE DISTRIBUTION AND PROTEC T ION O F 480 VOLT ACCESSORY 
POWER WITHIN THE NACELLE 


FAILURE MODES & EFFECTS 

i Open circuit: WTS cannot start up or will go to emergency 

APPLICABLE 
OPERATING MODES 

shutdown. : 

Al 1 

2 Short circuit: samp as No. 1 

ALL 


3 



4 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

failure 

MODE NO 

failure 
MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

CRITICAL 

III 

CATASTROPHIC 
‘ _ IV 

1 

75 

1.1 

133 


- 

x - 

- - - 

2 

25 

1.1 

400 



X 


3 








4 









FAILURE DETECTION METHODS 

’-2 Zero power output indicated at manned substation. 

2 

3 

4 

FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

Battery will discharge if maintenance is not effected. 


OPERATING MODES 

A SHUTDOWN 

B TRANSITION TO WARM UP 
C WARM UP 


D 

E 

F 


NAME 


G. TRUSK/H. ROTH 


date 8/17/78 
'Rev 10/13/71! 


TRANSITION TO STANDBY 
STANOBY 

TRANSITION TO OPERATE 


g operate ^ ev T 0/25/78 

H TRANSITION TO FEATHER 
I FEATHER 


78 K 6162-001 REV 1 



MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT 

NACELLE - EPS 115/230 VOLT CIRCUIT BREAKER PANE! 


FUNCTION OF COMPONENT 

PROVIDES FOR THE DISTRIBUTION AND PROTECTION OF 115/230 VOLT ACCESSORY 


POWER WITHIN THE NACELLE 



FAILURE MODES & EFFECTS 


- , . . 1 

applicable 

xihk lii* it'ii* pm n imh 

■araumuiMftTJi 


OPERATING MODES 


2 Individual circuit breakers fail to trip when required 



FAILURE FREQUENCY 


FAILURE SEVERITY 


FAI lure 
FAILURE MODE 
MODE NO FREQ % 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL CATASTROPHIC 

III IV 



FAILURE DETECTION METHODS 


i See FMEA sheets for individual items. 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 



name B. TRUSK/H. ROTH 


OPERATING MODES 


A SHUTDOWN 

B TRANSITION TO WARM UP 
C - WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


DATE7/17/78 


Rev 10/13/78 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78 K 6162-001 REV 1 
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MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT 

NACELLE - EPS 4.16 KV BUSES 


FUNCTION OF COMPONENT 

PROVIDES A PATH FOR THE FLOW OF 4.16 KV POWER WITHIN THE GENERATOR ACCESSORY UNIT 



FAILURE MOOES & EFFECTS 
1 




APPLICABLE 
OPERATING MODES 


2 A bus is open circuited: WTS shuts down 



FAILURE FREQUENCY 


„ F .^i JRE FAILURE RATE 

FAILURE MOOE j , 

MODE NO FREQ % x 10 PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL CATASTROPHIC 

III IV 



failure detection methods 


i WTS is shut down. 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 

1 & 2 Differential protection or ground protection will trip the generator 


circuit breaker. 



OPERATING MODES 



REV 10/13/78 

.A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 
























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

NACELLE - EPS 

480 VOLT CIRCUITS 



FUNCTION OF COMPONENT 

PROVIDES A PATH FOR THE FLOW OF 480 VOLT POWER WITHIN THE GENERATOR ACCESSORY UNIT. 



FAILURE MOD£S& ^FFE.CTS 

i A circuit is open circuited: 


APPLICABLE 
OPERATING MODES 


2 A circuit is shorted to ground: protective circuit breaker 


trips 


Two circuits are shorted: 


FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 

mode 

FREQ % 

FAILURE RATE 
x Uf 6 PER HOUR 

1 

50 

1.1 

2 

25 

1.1 

3 

25 

1.1 



MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE DETECTION METHODS 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

See FMEA sheets for individual items receiving 480 volt power. 



OPERATING MODES 


- 

REV 

REV 

1U/1 d//a 
10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G . OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H‘ TRANSITION TO FEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 



































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT PAGE ^6 

NACELLE - EPS 115/230 VOLT CIRCUITS fmeano 6.8 

FUNCTION OF COMPONENT 

PROVIDES A PATH FOR THE FLOW OF 115/230 VOLT WITHIN THE GENERATOR ACCESSORY UNIT. 


page 116 

FMEANO 6. 8. 8. 3 



FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

FAI LURE RATE 
x 10" 6 PER HOUR 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

1 

50 

1.1 

200 

2 

25 

1.1 

400 

3 

25 

1.1 

400 


FAILURE DETECTION METHODS 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

* See FMEA sheets for individual items receiving 115/230 volt power 



OPERATING MODES 



REV 10/13/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C - WARM UP 

F 

TRANSITION TO OPERATE 

1 - FEATHER 






























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

PAGE 117 

NACELLE 

D.C. CIRCUITS - 

FMEANO 6. 8. 8. 4 

FUNCTION OF COMPONENT 

PROVIDES A PATH FOR THE FLOW OF UNINTERRUPTIBLE DC POWER WITHIN THE 

GENERATOR ACCESS 



FAILURE MODES & EFFECTS 

i ODen 


§¥•? Li I • WFlfFl ■ ilil IH I B FwTOMlroirilSIItM 


applicable 
OPERATING MODES 



functions, aircraft warning lights and WTS shuts down. 



FAILURE FREQUENCY 



failure 

mode 

FREQ % 

f 

failure rate 

x 10" 6 PER HOUR 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

75 

1.1 

133 

— 75 

1.1 

133 

l 25 

1.1 

400 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


1 & 2 

Not remotely detectable. 


3c 

3 

WTS shut? down 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

See FMEA sheets for individual , functions: 

Generator protec 

tive devices (i 

5.8.1, 6.8.3. 1 through 6. 8. 3. 8) , 

Aircraft warning 

lights (6.9.3 

) 

Control system (memory and fai 

l-safe shutdown circuits 7.7.4 and 7.7.6) 



Failure severity critical' if WTS shuts down via fail-safe shutdown circuits. 


NAME G. TRUSK/H. ROTH 


OPERATING MODES 




, REV 
REV 

10/13/78 

10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FE ATHE R 


C WARMUP 

F 

TRANSITION TO OPERATE 

1 FEATHER 
































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

NACELLE - EPS 

COMPONENT 

CONTROL CIRCUITS 

page ns 

FMEA NO 6. 8. 8. 5 

FUNCTION OF COMPONENT 

PROVIDES A PATH FOR THE FLOW OF ( 

COMMAND, CONTROL AND INSTRUMENTATION 

SIGNALS WITHIN 

THE GENERATOR ACCESSORY UNIT. 


FAILURE MODES & EFFECTS 
1 


iimn 


Wllil 


Individual path is shorted to ground 


APPLICABLE 

OPERATING MODES 

F, 

G, 

H 

F, 

G, 

H 


FAILURE FREQUENCY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

1 

75 

2.3 

2 

25 

2.3 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


66.7 


200 


FAILURE SEVERITY * 

MINIMAL 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 


FAILURE DETECTION METHODS 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

* See FMEA sheets for individ 


(6.8.1 through 6.8. 5. 5) . 




G. TRUSK/H. ROTH 


OPERATING MODES 




REV 10/13/78 




TRANSITION TO STANDBY 


REV 10/25/78 

A 

SHUTDOWN 

D 

G OPERATE 

B 

TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C 

WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 




























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT 

NACELLE - EPS LIGHTING EQUIPMENT 


FUNCTION OF COMPONENT 

PROVIDES ILLUMINATION OF NACELLE INTERIOR AREAS USED FOR- MAINTENANCE AND 


REPAIR WHEN THE NACELLE IS OCCUPIED. 


FAI ^ UR fn^v¥duar circuit breakers supplying lighting circuits tri 


hts extinouis 


2 Lamps burned out 


3 115/230 V power failure 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 


failure mode URE failure rate 

MODE NO FREQ % x 10 ° PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE SEVERITY 

MINIMAL 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 


2 

40 

57 

5 

X 

3 

10 

57 

20 

X 



FAILURE DETECTION METHODS 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Rev 10/13/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 10/25/78 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C - WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 
































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT PAGE 120 

NACELLE - EPS CONVENIENCE OUTLETS fmeano 6.9.2 


FUNCTION OF COMPONENT 

MAKES ACCESSORY POWER AVAILABLE FOR TEMPORARY USE WITHIN THE NACELLE 


FOR ASSEMBLY MAINTENANCE AND REPAIR TASKS. 


FAILURE MQDf^S & EFFECTS . , . 

i Individual circuit breakers supplying convenient outlets trip: 


No power available at outlet. 


2 Open circuit to specific outlet: No power available at outlet. 


applicable 
OPERATING MOOES 



ower failure: No power available at any nacelle 


convenience outlet 




FAILURE FREQUENCY 


FAILURE MODE URE FAILURE RATE 
MODE NO FREQ % x 10 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i-3 Portable equipment fails to function 




FAILURE CAUSE ANO CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 


Rev 

10/13/78 

A SHUTDOWN 

D TRANSITION TO STANDBY 

G OPERATE ^ eV 

10/25/78 

B TRANSITION TO WARM UP 

E STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F TRANSITION TO OPERATE 

1 FEATHER 































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT 

NACELLE - EPS AIRCRAFT WARNING LIGHTS 


FUNCTION OF COMPONENT 

COMPLIES WITH FAA REQUIREMENTS TO PROVIDE VISUAL WARNING OF OBSTRUCTION TO LOW 


FLYING AIRCRAFT. 


FAILURE IV10DES& EFFECTS . . ... . . ,, . ., 

i Circuit breaker is tripped: high-intensity flashing white 


obstruction 


Wire to individual (one oF three) high-intensity flashing white 


obstruction lights is open circuit: one HIFWO is extinguished. 


Lamp malfunctions (burns out): individual HIFWO light is 


extinguished. 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

pailure rate 

x 10" 6 PER HOUR 

1 

2 

1140 

2 

1 

1140 

3 

“97 

1140 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


FAILURE SEVERITY 


MARGINAL 

II 



FAILURE DETECTION METHODS 


i -3 Alarm at manned substation. 


± ' 

1 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 


Visual observance at site. 


OPERATING MODES 


A SHUTDOWN 
B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 



REV. 10/25/78 

G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 



































COMPONENT 

TOWER STRUCTURE 


PAGE 1 22 

FMEANO 7.1.1 


MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

TOWER SUBASSEMBLY 


FUNCTION OF COMPONENT 

THE TOWER STRUCTURE SUPPORTS AND PROVIDES MOUNTING PROVISIONS FOR THE YAW DRIVE 


SYSTEM, ELECTRICAL CABLES AND NACELLE ACCESS DEVICE. 



FAILURE FREQUENCY 


FAILURE 
MODE NO 


FAILURE 
MODE 
FREQ % 


FAI LURE RATE 
x to" 6 PER HOUR 


ible 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHOOS 


1 Inspect tower if oye 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

The tower structure will be safe life designed, and no failures are anticipated 


unless loads greater than the design limit loads occur. Structural analysis 


will be performed using the MOD-2 WTS structural de 



OPERATING MODES 




A SHUTDOWN 

0 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K 6162-001 REV 1 























SUBSYSTEM 


FUNCTION OF COMPONENT 


mwamwiBviatiiHi 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

NACELLE ACCESS DEVICE 


PAGE 123 
FMEANO 7.1 2 




FAILURE MODES®. EFF.ECTS 

i Power lifting device malfunctions 


2 Power lifting device cable brakes 


IAI TON FOR TWO PERSONS/AND OR MAINTENANCE 


APPLICABLE 
OPERATING MODES 


Maintenance 


Maintenance 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

1 

99 , 

1.1 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE SEVERITY 

MINIMAL 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 




FAILURE DETECTION METHODS 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

Use ladder backup system if lift malfunctions and repair lift. 


Replace damaged cables and fittings.- Plan to use lift with 2 cables. 



OPERATING MODES 



Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

c warm up 

F 

TRANSITION TO OPERATE 

1 FEATHER 
























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

TOWER SUBASSEMBLY 

COMPONENT 

LADDER 


page 124 
FMEANO 7.1.3 

FUNC' 

THE 

lfdSjSj3!S3Niiviu39!l!]3!!^ 

EGRESSING THE NACELLE FROM THE POWER 


F THE POWER LIFT MALFUNCTIONS. 


FAILURE MOOES & EFFECTS , 

i Structural failure due to overload- 


failure. 


applicable 
OPERATING MODES 



FAILURE FREQUENCY 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE SEVERITY 

MINIMAL 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i Periodic visual inspections 


2 


3 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

No failure anticipated - ladder and attachments will be safe life designed - structural 


analysis will be performed using the MOD-2 WTS structural design criteria. 



OPERATING MODES 



Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 





























MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

TOWER FOUNDATION 


SUBSYSTEM COMPONENT PAGE 125 

TOWER SUBASSEMBLY TOWER FOUNDATION fmsa no 7.1.4 


FUNCTION OF COMPONENT 

The TOWER FOUNDATION SUPPORTS AND PROVIDES MOUNTING PROVISIONS FOR THE TOWER STRUCTURE 



FAILURE MODES & EFFECTS „ . . . . . , . 

i Structural failure of concrete foundation due to overload. 




APPLICABLE 

OPERATING MODES 

_A1 1 

1 

modes 

All 

modes 

) 

All 

modes 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

failure 
f MODE NO 

fai lure 

MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

MINIMAL 

MARGINAL 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

No failures anticipated unless loads greater -than the design limit loads occur. 


Structural analysis will be performed using the MOD-2 WTS structural design criteria. 


Corrosion prevention finishes will be used and maintenance performed when required. 


DATE 8-1 4-78 


OPERATING MODES 



Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TOSIANDBY 

G OPERATE 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K 6162-001 REV 1 































MOD 2 Failure Mode and Effects Analysis 


SU SYSTEM 


COMPONENT 


TOWER - EPS | TOWE R-HIGH VOLTAGE C ABLE fmeano 7211 

FUNCTION OF COMPONENT 

_PROV_IDE_S_A PATH F OR THE FLOW OF HIGH VOLT AGE GENERAT O R OUTPUT CURRENT FROM THE 

...CABLE JEANS 11 1 ON J3ECHMI SHJ.Q.JHE J1I GH .VOLTAGE JUNCTION B OX AT THE FOOT OF THE TOWER. 


FAII URE MODES & EFFECTS 

i OPEN. .Cl RCULT; ME. OR MORE PHASES G O TO Z ERO VOLTAGE; GCB OPENS 3 

BTC4.BU.STIE CONTACTOR.) OPENS, WTS SHUTS DOWN. 

2 ..SHORT.CIRCULTJ P0SS1 BLE JJASE JQ-P.HASE JAULT4 GCB OPENS. BTC 

JP£NS, WTS- SHUTS .DOWN 

3 GROUNDED COND UCTOR M ASSIVE FAULT ON ONE CONDUCTO R; GCB OPENS, 

BTC OPENS, WTS SHUTS DOWN. 


APPLICABLE 
OPERATING MODES 



FAI LURE 
FAILURE MODE 
MODE NO FREQ % 


FAILURE RATE 
x Kf 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


FAILURE SEVERIT 


MARGINAL 

II 




FAILURE DETECTION METHODS 


’ GENERATOR POWER INDICATION INDICATES ZERO POWER;- BTC POSITION INDICATES "OPEN". 


2 -3 GENERATOR POWER INDICATION INDICATES ZERO POWER; GCB AND BTC POSITION INDICATES 


BOTH ARE "OPEN" 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 


E 


DIFFERENTIAL CURRENT PROTECTION RELAY WILL CAUSE THE GCB TO OPEN OR AS A BACKUP, 


THE DIFFERENTIAL CURRENT PROTECTION CIRCUIT WILL CAUSE THE BTC TO OPEN. 


GENERATOR OR BTCU DIFFERENTIAL CURRENT PROTECTION OR GENERATOR OVER-CURRENT 


PROTECTION CIRCUITS WILL CAUSE THE GCB AND BTC TO OPEN 


SAME AS 2 PLUS THE GROUND CURRENT RELAY WILL CAUSE THE GCB TO OPEN. 



nam£ G TRUSK/H. ROTH 


OPERATING MODES 


A SHUTDOWN 
B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


DATE 8/17/78 
Rev. 9/8/78 
Rev. 10/25/78 


78 K 6162-001 REV 1 

















MOD-2 Failure Mode and Effects Analysis 


COMPONENT 


TOWER TO BTBU HIGH VOLTAGE CABLE I fmeano 7. 2. 1.2 


SUBSYSTEM 

TOWER - EPS ■ 


FUNCTION OF COMPONENT 

PROVIDES AN UNDERGROUND PATH FOR THE FLOW OF HIGH' VOLTAGE GENERATOR CURRENT FROM THE 


JUNCTION BOX INSIDE THE FOOT OF THE TOWER TO THE BUS TIE BREAKER UNIT LOCATED 


OUTSIDE AND AWAY FROM THE TOWER 


failure modes & effects 
i Open circui^ 




APPLICABLE 

operating modes 



3 Grounded conductor: massive fault on onehiah voltaae conductor 

G 

BTC ooens. WTS shuts down 



FAILURE FREQUENCY 


I 

FAILURE SEVERITY 

. 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

MINIMAL 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i-3 WTS shut down 

- 

2 

3 

- 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

1-3 Tower zone differential current protection relay will cause the BTC to open. 


As a backup: generator over-current or ground protection relay may 


trip the GCB; fused manual disconnect may fuse open 



name q. TRUSK/H. ROTH 


date 8/17/78 


OPERATING MODES 




Rev 10/13/78 

A 

SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

Rev. 1 0/25/78 

B 

TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

c 

WARM UP 

F 

TRANSITION TO OPERATE 

I FEATHER 



78 K 6162 001 REV 1 























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

TOWER - EPS 

component BTBU TO TRANSFORMER 
HIGH VOLTAGE' CABLE 

PAGE 128 

FMEANO 7. 2. 1.3 

FUNCTION OF COMPONENT 




TRANSFORMER. 


failure mooes & effects 




volts: BTC opens, WTS shuts down, accessory power is distributed 


fault; BTC opens, WTS shuts down, accessory power is distributed 


APPLICABLE 
OPERATING MODES 




FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 
MODE 
FREQ % 

FAILURE RATE 
x 10' 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


FAILURE SEVERITY 


MARGINAL CRITICAL CATASTROPHIC 

II III IV 



FAILURE DETECTION METHODS 


i-3 WTS shut down 


2 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

1-3 For generator protection see FMEA 7. 2. 1.2 - ■ 


1-3 For accessory power utilization equipment protection (TBA) 


see also FMEA 7.2. 2.1 



OPERATING MODES 


A - SHUTDOWN 
B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


Rev 10/13/7E 
Rev. 10/25/78 


78 K 6162-001 REV 1 





























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

TOWER - EPS 

COMPONENT 

AHHftL HIGH VOLTAGE CABLE 

PAGE 129" 

FMEANO 7. 2. 1.4 

FUNCTION OF COMPONENT . 

w Aa 




THE FUZED M 


FAILURE MOOES & EFFECTS . , . , 

i Conductor open circuit: one or more high voltage power phase 


go to zero volts: BTC .opens, WTS shuts down, accessory power 


applicable 
OPERATING MODES 






2 Conductor short ci 


to-neutral fault: BTC opens, STS shuts down, accessory power 


BTC opens, WTS shuts down; accessory power is distributed at 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS! 


MINIMAL 

I 


FAILURE SEVERITY 


MARGINAL 


CRITICAL CATASTROPHIC 
III . IV 



FAILURE DETECTION METHODS 


i-3 WTS shuts down 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 


1-3 For accessory power utilization equipment protection (TBA) see FMEA 7.2. 2.1. 



OPERATING MODES 




Revision: 

A 

SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

10/16/78 

B 

TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C 

WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 

Rev. 10/25/78 



























MOD-2 Failure Mode and Effects Analysis 


subsystem component ACCESSORY POWER FEEDER I page 130 

TOWER - EPS TO THE TOWER JUNCTION BOX fmeano 7.2.2. 1 


FUNCTION OF COMPONENT 

PROVIDE AN UNDERGROUND PATH FOR THE FLOW OF NECESSARY POWER FROM THE BUS TIE 


BREAKER UNIT TO THE ACCESSORY POWER JUNCTION BOX AT THE BASE OF THE TOWER. 


FAILURE MODE S S| EFFECTS 

1 Open circuit: accessory power is distributed at other than 


3-phase. 


Short circuit: fused manual disconnect may fuse and accessor 


ower distributed at 0 




APPLICABLE 
OPERATING MODES 


F, G, H 


F, G, H 


FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAI LURE 
MODE 
FREQ % 

1 

FAILURE RATE 
x 10" 6 PER HOUR 

MINIMAL 

1 

1 

1 

MARGINAL 

CRITICAL 

Ml 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i-3 WTS shut down. 


2 


3 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 



If power phase faulted is supplying the control system, WTS will go into 


emergency shutdown; if one of the other two phases, the WTS will probably 


shut down. 


NAME G. TRUSK/H. ROTH 


DATE 8/17/78 


OPERATING MODES 




REV 

10/16/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

Rev. 

10/25/78 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 
































SUBSYSTEM 

TOWER - EPS 


MOD-2 Failure Mode and Effects Analysis 


component ACCESSORY POWER FEEDER TC PAGE 131 
THE NACELLE fmeano 7. 2. 2. 2 


FUNCTION OF COMPONENT 

PROVIDE A PATH FOR THE FLOW OF NACELLE ACCESSORY POWER FROM THE JUNCTION BOX AT THE 


BASE OF THE TOWER ;T0 THE CABLE TRANSITION MECHANISM AT THE YAW BEARING. 


FAILURE MODE? & EFFECTS 

i Open Circuit 


2 Short Circuit 


3 G 


APPLICABLE 
OPERATING MODES 


F.G.H 


F.G.H 


F.G.H 



FAILURE FREQUENCY 


' 

FAILURE SEVERITY 

- 

failure 

MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

MINIMAL 

I 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



'2 

25 

3 

25 


FAILURE DETECTION METHODS 

- 


i-3 WTS shutdown. 


2 

2 



3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 


Same as FMEA 7.2.2. 1 



OPERATING MODES 



Rev. TTJ/ I6//H - " 

G OPERATE ^ eV " 1 0/ 25/ 78 

A SHUTOOWN 

D 

TRANSITION TO STANDBY 

B TRANSITION TO WARM UP 

E 

STAND8Y 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 

78 K 6162 001 REV 1 


- 

1 

































SUBSYSTEM 

TOWER - EPS 


FUNCTION OF COMPONENT 


MOD-2 Failure Mode and Effects Analysis 


component ACCESSORY POWER CABLE T( page 132 
THE TOWER CONTROL UNIT I fmeano 7 . 2. 2. 3 


PROVIDE AN UNDERGROUND PATH FOR THE FLOW OF ACCESSORY POWER FROM THE BUS TIE CIRCUIT 


BREAKER UNIT TO THE CONTROL SYSTEM'S TOWER CONTROL UNIT LOCATED INSIDE THE BASE OF 


THE TOWER. 


ULURE MODES & EFFECTS , , ^ ^ . ... , 

loss of capability to communicate with nacelle 


control svst 


2 Short circuit: Same as #1 


FAILURE MODES & EFFECTS 

1 Open circuit: 


APPLICABLE 
OPERATING MODES 


Maintenance 


Maintenance 


Grounded Conductor. Same as #1 



failure frequency 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

failure 

MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x 10* 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


1 -3 None remotely 


R 1-3 On Site: Inability to manually operate the WTS 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Rev 

10/16/8 

A SHUTDOWN 

D 

TRANSITI ON TO STANDBY 

G OPERATE ReV. 

10/25/78 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 






























MOD-2 Failure Mode and Effects Analysis 


subsystem component ACCESSORY POWER CABLE TO page 133 

TOWER - EPS THE LIFT SYSTEM fmeano7-2.2.4 


FUNCTION OF COMPONENT 

PROVIDE AN UNDERGROUND PATH FOR THE FLOW OF ACCESSORY POWER FROM THE BUS TIE BREAKER 


UNIT TO THE LIFT SYSTEM LOCATED IN THE BASE OF THE TOWER. 


FAILURE MOOES & EFFECTS 

i Open Circuit: Elevator will not operate 


Short Circuit: Elevator protective circuit breaker trips. 


elevator will not operate 


3 Grounded Conductor: Elevator protective circuit breaker trips. 


elevator will not operate 


APPLICABLE 
OPERATING MODES 



Maintenance 



FAILURE FREQUENCY 

failure 

MODE NO 

failure 

MODE 
FREQ % 

f'ailure RATE 
x 10‘ 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


1-3 On-site elevator does not operate, associated circuit breaker is tripped 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE] 



NAME G. TRUSK/H. ROTH 


date 8/17/78 


OPERATING MODES 



Kev. iu/i b//a 




Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 





































SUBSYSTEM 

TOWER - EPS 


MOD-2 Failure Mode and Effects Analysis 


component ACCESSORY POWER FEEDER T 
TOWER ELECTRICAL FACILITIES 


FUNCTION OF COMPONENT 

PROVIDE A PATH FOR THE FLOW OF ACCESSORY POWER FROM THE BUS TIE BREAKER UNIT TO THE 


CATED AT THE FOOT OF THE TOWER 


FAILURE MODES & EFFECTS , 

i Open Circuit- lights or utility outlets not functional 


2 Short Circuit- protective circuit breaker trips and lights or 


utility outlets not functional 


3 Grounded Conductor, Proctective circuit breaker trips and lights 


or utility outlets not functional 


APPLICABLE 
OPERATING MODES 


intenance 


Maintenance 


Maintenance 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

1 

failure 

MODE 
FREQ % 

FAILURE RATE 
x IQ' 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i -3 None remotely 

1 -3 On Site: Lights out or electrical outlets not functiomn g 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

Rev. 

Rev 

G OPERATE ncVm 

10/16/78 

10/25/78 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 



78 K 6162-001 REV 1 

































MOO-2 Failure Mode and Effects Analysis 

subsystem component ACCESSORY POWER CABLE 10 I page 135 

TOWER - EPS THE .POWER OUTPUT TRANSFORMER fmeano 7. 2. 2 . 6 


FUNCTION OF COMPONENT 

PROVIDE AN UNDERGROUND PART FOR THE FLOW OF ACCESSORY POWER FROM THE BUS TIE BREAKER 


TO THE HIGH VOLTAGE POWER OUTPUT TRANSFORMER 



ben D fcircufi < r rS WTS shuts down, accessory power distributed at 


less than 3 -phase. 


2 Short Circuit: Same as #1, fused manual switch for accessory 


ower may be fused, open. 


3 Grounded Conductor: Same as #2 


APPLICABLE 
OPERATING MODES 




FAILURE FREQUENCY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

failure RATE 
x 10" 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 



- 

i WTS Shut Down 



- 

2 




3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

1-3 Differential .protection will 'trip the BTC if WTS in "Operate" mode. 



OPERATING MODES 


Rev 10/16/78 
Rev. 10/25/78 

A SHUTDOWN 

D TRANSITI ON TO STANDBY 

G OPERATE 

B TRANSITION TO WARM-UP 

E STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F - TRANSITION TO OPERATE 

1 FEATHER 



































SUBSYSTEM 

TOWER - EPS 


MOD-2 Failure Mode and Effects Analysis 


component UNINTERRUPTABLE POWER 
FEEDER TO THE TOWER JUNCTION BOX 


FUNCTION OF COMPONENT 

PROVIDE AN UNDERGROUND PATH FOR THE FLOW OF UNINTERRUPTABLE (DC) POWER FROM THE BUS TIE 


TO THE JUNCTION BOX LOCATED INSIDE THE BASE OF THE TOWER. 


FAILURE MODES & EFFECTS , , 

i Open Circuit: No power to operate protection devices in BTCU. 


applicable 
OPERATING MODES 



Same as #1 


Conductor Grounded: Same As #1 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x 10 -6 PER HOUR 

1 

50 

.15 

2 

25 

.15 



MEAN TIME 
TWEEN FAILU 
(YEARS) 


FAILURE SEVERITY 

MINIMAL 

' MARGINAL 
II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


WTS shutdown. 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

Conservative and redundant design of cable run & careful fabrication fochn-imics should 


minimize the probability of this failure mode. If the following faults occur WTS will 


non shut down: Utility transformer low oil or overtpmnpraturp. rpvprqp nnwpr nV 


differential protection. 


Utility transformer is protected against explosion and fire. Fused manual disconnect 


may fuse open under certain fault conditions. 



OPERATING MODES 


A SHUTDOWN 

8 TRANSITION TO WARM UP 
C WARM UP 


D TRANSITI ON TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


Rev. 

„ Rev. 10/25/78 

H TRANSITION TO PIXtJeV 27/78 
I FEATHER 


78 K 6162-001 REV 1 




































SUBSYSTEM 

TOWER - EPS 


MOD-2 Failure Mode and Effects Analysis 


component UNINTERRUPTABLE POWER ' 
CABLE TO THE TOWER CONTROL UNIT 


FUNCTION OF COMPONENT 

PROVIDE AN UNDERGROUND PATH FOR THE FLOW OF UNINTERRUPTABLE POWER FROM THE BUS TIE 


BREAKER UNIT TO THE CONTROL SYSTEMS TOWER CONTROL UNIT MOUNTED INSIDE THE BASE OF THE 


TOWER. 


FAILURE MODES & EFFECTS 

i Qoen circin 




Short circuit - Same as #1 


Conductor Grounded Same as #1 



FAILURE FREQUENCY 

failure 
MODE NO 

fai lure 
MODE 
FREQ % 

Failure rate 

x lO^PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS)' 



FAILURE SEVERITY 


MINIMAL 

MARGINAL 
' II , 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


1 - 3 Remote! y. None 


l 1-3* 


a 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

Data stored in memory is lost, maintenance personnel are not able to use on-site 


stored data for trouble identification. Trouble shooting procedures are adequate 


to isolate and identify source of malfunctions. 



OPERATING MODES 




-Rev 10/1 mw 
Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARMUP 

F 

TRANSITION TO OPERATE 

1 FEATHER 




78 K -6162-001 REV 1 
































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

TOWER - EPS 

component UNINTERRUPTABLE POWER 
FEEDER TO THE NACELLE 

PAGE 138 

FMEANO 7. 2. 2. 9 

FUNCTION OF COMPONENT „„ 

PROVIDE A PATH FOR THE FLOW OF NACELLE UNINTERRUPTABLE (DC) POWER FROM THE JUNCTION BOX 


LOCATED INSIDE THE BASE OF THE TOWER TO THE CABLE 


FAILURE MODES & EFFECTS 



OPERATING MODES 




Rev. 

10/16/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

Rev. 

10/25/78 

B TRANSITION TO WARM UP 

E 

STANOBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 

































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

TOWER EPS 


COMPONENT CON 1 

TO THE NACELLE 




ii'/lTiliT*, 


FUNCTION OF COMPONENT _ _ _ 

PROVIDE A PATH FOR THE FLOW OF CONTROL SYSTEM COMMANDS AND DATA FROM THE TOWER CONTROL 


UNIT INSIDE THE BASE OF THE TOWER TO THE CABLE TRANSITION MECHANISM AT THE YAW BEARING. 


FAILURE MOOES & EFFECTS 
1 


APPLICABLE 
OPERATING MODES 


2 Wires short circuited 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

MINIMAL 

1 

marginal 

CRITICAL 

III 

CATASTROPHIC 

IV 



failure detection methods 


i -3 WTS shutdov/n. 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 


Same as FMEA 6. 6. 3. 5 



OPERATING MODES 




Rev. 10/16/78 
Rev. 1 0/25/78 

A 

SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B 

TRANSITION TO WARM UP 

E 

STANOBY 

H TRANSITION TO FEATHER 

C 

WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 
































SUBSYSTEM 

TOWER - EPS 

FUNCTION OF COMPONENT 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

CONTROL CABLE TO THE BTB UNIT 


PAGE 140 
FMEA NO 


7. 2. 3. 2 


PROVIDE AN UNDERGROUND PATH FOR THE FLOW OF CONTROL SYSTEM COMMANDS AND DATA FROM THE 


TOWER CONTROL UNIT L OCATED INSIDE THE BAS E OF THE TOWER TO THE BUS TIE BREAKER UNIT.. 


FAILURE MODES & EFFECTS , . , , . , , , 

i Open circuit: BTB does not trip on WTS shutdown command, synch- 


ronizer cannot be enabled, utility bus tie or 


_ available. 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 


FAILURE 
FAILURE MODE 


FAILURE RATE 


MODE NO FREQ % x 1{f° PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS! 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i-3 None remotely 


% 1-3 On-site 1 Review of stored data 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

Protective devices in the EPS will trip the BTC as a result of reverse power 


if WTS is shut down. 



Also see FMEA 7.7.41 through 7.7.44 



name G. TRUSK/H, ROTH 


date 8/17/78 


OPERATING MODES 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

Rev 

G OPERATE ^ eV • 

10/17/78 

10/25/78 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

TOWER - EPS 

CABLE TRANSITION MECHANISM 


FUNCTION OF COMPONENT 


PROVIDE A MEANS OF TRANSFERRING POWER AND SIGNAL -ELECTRICAL CIRCUITS FROM 


THE NACELLE TO TOWER AROUND THE YAW BEARING THUS ALLOWING THE NACELLE TO 


ROTATE IN RELATION TO THE TOWER. 


FAILURE MODES & EFFECTS 
1 


IITiiiOiFliT? 


applicable 
OPERATING MODES 



. FAILURE FREQUENCY 


FAILURE 
FAILURE MODE 
MODE NO FREQ % 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE SEVERITY ' |£> 

MINIMAL 

l 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS |£> 



OPERATING MODES 



Rev 10/16/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE ^ eV 1 0/25/ 78 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARMUP 

F 

TRANSITION TO OPERATE 

1 FEATHER 




























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 


COMPONENT 

PAGE 142 

TOWER - EPS 


ELECTRICAL PATH ACROSS YAW BEARING 

FMEANO 7.4.1 

FUNCTION OF COMPONENT 

PROVIDE A PATH FOR THE 

FLOW OF LIGHTNING CURRENT THROUGH THE YAW BEARING. 



FAILURE FREQUENCY 


FAILURE RATE 


failure 

FAILURE MODE 
MODE NO FREQ % 


x IQ" 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


FAILURE SEVERITY 


MARGINAL CRITICAL CATASTROPHIC 

II Ml IV 



failure detection methods 



i Inspection 



2 



3 




FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

Yaw bearing is massive and offers a very low resistance path to high currents 


resulting during lightning strokes. 



OPERATING MODES 



REV 10/17/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K 6162-001 REV 1 

























SUBSYSTEM 

TOWER - EPS 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

GENERATOR LIGHTING ARRESTORS 


FUNCTION OF COMPONENT 

PROVIDE A LOW IMPEDANCE PATH FOR THE FLOW OF LIGHTNING INDUCED CURRENT FROM THE 


GENERATOR WINDINGS TO THE STRUCTURAL GROUND PATH OF THE SYSTEM. (THESE ARRESTORS ARE 


IN THE GENERATOR TERMINAL BOX). 


FAILURE MODES & EFFECTS 

o protection, against lightning surge currents . 


FAILURE MODES & EFFECTS 

i Open circuit 



FAILURE FREQUENCY 


FAILURE 
MODE NO 



MEANTIME 

FAILURE RATE BETWEEN FAILURE 
x 10"° PER HOUR ’ (YEARSI 


| FAILURE SEVERITY 

MINIMAL 

MARGINAL 
1 1 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i WTS shutdown 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

If lightning surge currents reach the generator winding, because the arrestor is 


open circuit, insulation damage can-occur leading to an internal '■fault. Backup 


protection is provided by differential protection and ground current protection. 


Careful attention to lightning arrestor installation should be sufficient to 
preclude this failure mode. 



name G.- TRUSK/H. ROTH 


date 8/ 17/ 78 


OPERATING MODES 



Rev 10/17/8 

A - SHUTDOWN 

0 

TRANSITION TO STANDBY ‘ 

G OPERATE 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

_F 

TRANSITION TO OPERATE 

1 FEATHER 




























MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

TRANSFORMER LIGHTNING ARRESTORS 


PAGE 144 
FMEANO 7.4.3 


SUBSYSTEM 

TOWER - EPS 


FUNCTION OF COMPONENT 

PROTECT THE TRANSFORMER WINDINGS BY PROVIDING A LOW IMPEDANCE PATH TO EARTH GROUND 


FOR LIGHTNING INDUCED CURRENT. (THESE ARRESTORS ARE LOCATED IN THE TRANSFORMER 


TERMINAL BOX). 


failure ^odes& effects ^ protection against lightning surge currents. 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 

FAILURE I c Ai i uRp RATE meantime 

FAILURE MODE failure rail BETWEEN FAILURE 


MODE NO FREQ % x 10' a PER HOUR 


(YEARS) 


failure severity 

MINIMAL 

1 

MARGINAL 
1 1 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


1 ' WTS Shut down 


2 

- 

3 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

If lightning surge currents reach the transformer windings, because the arrestor is 


open circuit, insulation damage or flashover can occur leading to an internal fault. 


Backup protection is provided by differential protection. 



OPERATING MODES 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

Rev. 

Rev 

G OPERATE 

10/17/8 

10/25/78 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


























SUBSYSTEM 

TOWER - EPS 


MOO-2 Failure Mode and Effects Analysis 


COMPONENT PAGE ]45 

EARTH GRID fmeano 7.4.4 


FUNCTION OF COMPONENT 

PROVIDE A SATISFACTORY ELECTRICAL CONNECTION WITH THE EARTH TO PROVIDE A CURRENT 


PATH FOR LIGHTNING AND ELECTRICAL FAULT CURRENTS. 


FAILURE MODES S( EFFECTS - 

i Open circuit possible: erratic relay operation, possible 


hiqh potential between structures and earth 


Hi qh resistance cir cuit: same as #1. 


APPLICABLE ' 
OPERATING MODES 




FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAI LURE 
MODE 
FREQ % 

FAILURE RATE 
x 10‘ 6 PER HOUR 

MINIMAL 

1 

MARGINAL ■ 
U 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i -2 None remote V 


7 1-2 On-site: erratic relay operation. 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 

During faults or lightning, lethal potential differences can occur between equipment 


and earth when the earth connection is either open circuited or has a high resistance. 


During normal operation protective relays may operate inadvertently to result in WTS 


shutdown an d possible shock hazards to personnel may exist due to unbalanced loads. 
Special precautions will be taken to assure that grounds are properly installed and 


that earth/ground resistance is at safe levels. 



jl> If site is occupied- O&M Manual will prohibit maintenance during storms. 


[£> Without periodic inspections. With periodic inspections, frequency is over 


100,000 years between failure. 


name g. TRUSK/H. ROTH date 8/17/78 






























SUBSYSTEM 

TOWER - EPS 

FUNCTION OF COMPONENT 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

CONNECTION TO EARTH GRID 


PAGE 
FME A NO 


7.4.5 


PROVIDE A PATH FOR THE FLOW OF LIGHTNING INDUCED CURRENTS AND ELECTRICAL FAULT 


CURRENTS IN THE WTS STRUCTURE TO THE EARTH GRID TO ALLOW THEIR SAFE DISSIPATION. 


FAILURE MODES & EFFECTS 

i Same as FMEA 7.4.4 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 

FAILURE 

failure 

MODE 

FAILURE RATE 

c 

MODE NO 

FREQ % 

x 10 PER HOUR 

1 

100 

l l 


MEAN TIME 
BETWEEN FAILURE 
I YEARS) 


MINIMAL 

I 


FAILURE SEVERITY 


MARGINAL CRITICAL CATASTROPHIC 

II III IV 



FAILURE DETECTION METHODS 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

Same as FMEA 7.4.4. 



OPERATING MODES 



KtV 10/17/78 
Rev. 10/25/78 

G OPERATE 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K 6162-001 REV 1 























SUBSYSTEM 

TOWER - EPS 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

BTBU ENCLOSURE 


FUNCTION OF COMPONENT 

PROVIDE A WEATHERPROOF HOUSING, A MOUNTING BASE AND A MEANS OF CONVENIENT 


ACCESS TO ALL THE EQUIPMENT AND WIRING PACKAGED WITHIN THE BUS TIE BREAKER UNIT 


FAILURE MODES & EFFECTS 

i Enclosure leaks water or sand/dust into enclosure 


APP LICABLE 
OPERATING MODES 



FAILURE FREQUENCY - 



FAILURE SEVERITY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

failure rate 

x 10” 6 PER HOUR 

MEAN TIME 
, BETWEEN FAILURE 
(YEARS) 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 



- 

i Inspection 


- 


2 


- 


3 



- 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

Proper positioning of parts to minimize water entering live circuits by 


baffling, channeling and drip proofing as well as close detail to 


weather-proofing or enclosure and drainage will preclude electrical 
failures due to water- and particulate damage. 



name G _ trusk/H- ROTH 


DATE 8/1 7/78 


OPERATING MODES 



Rev 10/17/71 

A SHUTDOWN 

D 

TRANSITI ON TO S TANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY ' 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 

















MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM I COMPONENT PAGE J 43 

BUS TIE CONTACTOR (BTC) fmeano 7. 6. 1.2 


FUNCTION OF COMPONENT 

PROVIDE A REMOTELY OPERATED, HIGH VOLTAGE, HIGH CURRENT, ELECTRICAL SWITCH TO PERMIT. 


THE FREQUENT CONNECTING AND DISCONNECTING OF THE WTS ELECTRICAL POWER OUTPUT TO THE 


UTILITY TRANSMISSION LINE. 


FAILURE MODES & EFFECTS 

1 BTC FAILS OPEN- WTS CANNOT BE. CONNECTED TO THE UTILITY 


TRANSMISSION LINE. 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAI LURE 
MODE 
FREQ % 

FAILURE RATE 
x 10' 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i GENERATOR POWER I ND I CAT I 


2 NOT DEFECTABLE U 


3 & 4 GENERATO 



FAILURE CAUSE AND CORRECTIVE ACTION (I F APP LICABLE) 

1-4 REPLACE THE BTC; THE BTC IS COMMERCIALLY AVAILABLE AND IN EXTENSIVE USE BY THE 


UTILITIES AND SHOULD BE VERY DEPENDABLE. 


2 PROTECTIVE CIRCUITS TRIP THE GCB IF THE BTC HAS NOT OPENED AFTER IT SHOULD. 


OPERATING MODES 



Rev. 
Rev . 

G OPERATE 

9/8/78 

w 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 



78 K 6162-001 REV 1 









































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT 

TOWER - EPS SYNCHRONIZER 


FUNCTION OF COMPONENT 

determine when voltage amplitudes and phase relationships of. the generator output and 


THE UTILITY TRANSMISSION LINE ARE WITHIN ACCEPTABLE, PRESET LIMITS AND PROVIDE A - 


SIGNAL TO CLOSE THE BUS TIE CONTACTOR. 


FAILURE MODES & EFFECTS 

1 FA II 




2 OPERATES TO SYNC TOO EARLY: MECHANICAL DAMAGE POSSIBLE. 


3 OPFRATFS TO SYNC TOO LATE: MECHANICAL DAMAGE POSSIBLE. 


APPLICABLE 
OPERATING MODES 


F.G.H 


f,g,h 


F >G,H 



FAILURE FRE'QUENCY 

FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x 10* 6 PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 



failure detection methods 


1 GENERATOR POWER INDICATOR INDICATES ZERO POWER, BTC INDICATES OPEN. 


2 &3 IN EXTREME OUT-OF-SYNC BTC CLOSURE, MECHANICAL DAMAGE MAY OCCUR TO THE GENERATOR OR 


3 


failure cause and corrective action (IF applicable) 




■ KlBIIlM 


iMiilal 


IA'MIiWiI 


synchronizer. Resultant failure rate is neoli 



OPERATING MODES 




Rev 

. 9/8/78 

A SHUTDOWN 

. D 

transition to standby 

G OPERATE 

Rev. 

10/25/78 

8 TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER . 


C WARM UP ' 

F 

TRANSITION TO OPERATE 

1 FEATHER 























SUBSYSTEM 

TOWER - EPS 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT PAGE ] 50 

DIFFERENTIAL PROTECTION RELAY fmeano 7. 6 . I. 3. 2 


FUNCTION OF COMPONENT 

MONITORS THE DIFFERENTIAL CURRENT FLOW IN THE WTS POWER OUTPUT CIRCUIT ZONE FROM THE 


CABLE TRANSITION MECHANISM TO THE FUSED MANUAL DISCONNECT SWITCH AND PROVIDES A SIGNAL 


TO OPEN THE BUS TIE CONTACTOR WHEN THE DIFFERENTIAL CURRENT EXCEEDS A PRESET LIMIT THUS 


. FAULT WITHIN THE PROTECTED ZONE. 




APPLICABLE 
OPERATING MODES 


2 Trip setting is too low: BTC will trip too often on unbalanced 


loads or transients. 


3 Trip setting too high: fault currents may continue to flow. 




FAILURE FREQUENCY 



FAILURE 

mode 

FREO % 

FAILURE RATE 
x 10‘ 6 PER HOUR 

50 

21 

25 

21 

25 

21 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 
1 1 

CRITICAL 

III 

CATASTROPHIC 

IV 



failure detection methods 


i WTS shut down 


2 WTS shut down 


3 WTS shut down 


failure cause and corrective ACTION (IF APPLICABLE) 


1 1 1 !■! I III tig 


shooting procedures will reveal source of trouble, repair as necessar 



3. GCB will trip on overcurrent. Troubleshoot reset trip setting or replace 


differential protection relay as necessary. 



name G. TRUSK/H. ROTH 


DATE 8/17/78 


OPERATING MODES 



Rev 10/17/71 

A SHUTOOWN 

0 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K 6162-001 REV 1 

































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

TOWER -EPS 

COMPONENT 

GENERATOR VOLTMETER 

PAGE 151 
FMEANO 7.6.1 .4.1 

FUNCTION OF COMPONENT 

PROVIDES A CONTINUOUS VISUAL DISPLAY OF THE MAGNITUDE OF THE OUTPUT V 

'OLTAGE OF THE 

GENERATOR FOR USE OURING ACCEPTANCE TESTING, TROUBLE SHOOTING AND MAINTENANCE. 


FAILURE MODES & EFFECTS 

i Does not indicate: no effect 


2 Indicates hioh or low: no effect 


APPLICABLE 

OPERATING''MODES 


Maintenance 


Maintenance 



failure frequency 


FAILURE SEVERITY 



FAILURE RATE BETWEEN FAILURE 
x 10"” PER HOUR (YEARS) 


CATASTROPHIC 
. IV 



FAILURE DETECTION METHODS 




. .. 

i Visual inspection 




- 

2 Visual inspection 





3 





4 

FAILURE CAUSE AND CORRECTIVE ACTION (1 F,APP LICABLE) 







See also FMEA 7. 6. 1.4. 9 



OPERATING MODES 


1 


Rev 

10/17/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

Rev. 

10/25/78 

8 TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER ' 

C WARM UP 

F 

TRANSITION TO OPERATE 

' 1 FEATHER 


- 

78 K 6162-001 REV 1 





- 

























SUBSYSTEM 

TOWER - EPS 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

UTILITY VOLTMETER 


PAGE 1 52 


7. 6. 1.4. 2 


FUNCTION OF COMPONENT 

PROVIDES A CONTINUAL VISUAL DISPLAY OF THE MAGNITUDE OF THE UTILITY VOLTAGE AT ITS 
INTERFACE WITH THE WTS FOR USE DURING ACCEPTANCE TESTING, TROUBLE SHOOTING AND 


TENANCE. 


FAILURE MODES & EFFECTS 

- i Does not indicate: no effect 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 


failure 
MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x 10- 6 PER HOUR 

MEAN TIME 
BETWEEN FAILURE 
(YEARS! 

1, 2 

100 

1.1 

100 


FAILURE SEVERITY 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL CATASTROPHIC 

III IV 




failure detection methods 


i- 2 Visual Inspection 


2 Periodic Calibration Check 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 


A SHUTDOWN 

B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


DATE 8/17/8 


Rev 10/17/8 
Rev. 10/25/78 


78 K 6162-001 REV 1 

















MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

GENERATOR AMMETER 


SUBSYSTEM 

TOWER - EPS 


FUNCTION OF COMPONENT 

PROVIDES A CONTINUOUS VISUAL DISPLAY OF THE CURRENT FLOWING OUT OF THE GENERATOR 



FAILURE MODES & EFFECTS . ^ _ 

i Meter does not indicate: no direct reading of generator outpu 




FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

1; Al LURE RATE 
x 10* 6 PER HOUR 

1 

i ,2 

100 

1.1 


MEAN TIME 
TWEEN FAILL 
(YEARSI 


100 


FAILURE SEVERITY 

MINIMAL 
♦ 1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 


FAILURE DETECTION METHODS 


i - 2 Visual and calculations 


2 Periodic calibration check 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

Rev. 

- G OPERATE ^ eV ■ 

8/18/8 

10/25/78 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 
































FAILURE MODES & EFFECTS , A ^ _ , 

i Meter does not indicate: No direct reading of line current 


APPLICABLE 
OPERATING MODES 


2 Meter indicates high or low: incorrect line current data 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARSI 

FAILURE SEVERITY 

failure 
MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

M 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i - 2 Visual and calculations 


2 Periodic Calibration Check 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Rev 10/18/78 
o o™a, 5 Rev - W 25778 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K 6162-001 REV 1 























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

TOWER - EPS 

COMPONENT 

GENERATOR KW METER 

PAGE 1 55 

FMEA NO 7.6.1 .4.5 

FUNCTION OF COMPONENT 

PROVIDES A CONTINUOUS DISPLAY OF THE KW (POWER) BEING DELIVERED BY 

THE GENERATOR. 


* 

FA '^u^eTe 0 r s cfo|FsFnCo T ! indicate: No direct reading of power delivered 

APPLICABLE n 

OPERATING MODES 

by generator. 

G 

t 

2 Mpter indicates high or 

low: Vncorrec^ aenerator 

output Dower 


G 7 

readina 

- \ 








3 



' w ” * 



‘ 

- 

■ 

/ 


4 


**■ - 


















; 

/ 

FAILURE FREQUENCY 



FAILURE SEVERITY 

-FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

F Al LURE RATE 
x 10* 6 PER HOUR 

MEAN TIME ' 
BETWEEN FAILURE 
(YEARS! 


MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

/ 

catastrophic 

_ IV. 

r 

L 2 

100 

1.1 

inn 


x I 


t 


2 



, 





3 





- 



4 


- 






FAILURE DETECTION METHODS 

1 - 2 

Visual and calculations 







- 

2 

Periodic calibration 

check 




* 




3 

4 

FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

__ 



- 

, 


-- 





















~ 

- 

- 


NAME G 

TRUSK / H. 

ROTH 


DATE 8/17/8 


OPERATING MODES 


A SHUTDOWN 

B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


C. OPERATE 
H TRANSITION TO FEATHER 
I FEATHER 


Rev. 10/18/8 
Rev. 10/25/78 


78 K 6162-001 REV 1 



MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

TOWER - EPS 

COMPONENT 

GENERATOR POWER FACTOR METER 

PAGE 1 56 
fmeano 7.6.1 .4.6 

FUNCTION OF COMPONENT 

PROVIDES A CONTINUOUS DISPLAY OF 

THE POWER FACTOR OF CURRENT BEING DELIVERED BY THE 

GENERATOR. 


FAI ^ u R!^er E <foel FF no? S indicate - no direct reading of power factor 


delivered by the generator. 


2 Meter indicates high or low: incorrect power factor data. 


APPLICABLE 
OPERATING MODES 




FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 


FAILURE SEVERITY 


BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL CATASTROPHIC 

III IV 



FAILURE DETECTION METHODS 


i -2 Visual and calculations 


2 Periodic Calibration Check 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Rev. 10/18/8 

G OPERATE Re »- >0/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K 6162-001 REV 1 



























SUBSYSTEM 

TOWER - EPS 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

GENERATOR KILOWATT- HOUR METER 


page 157 

FMEANO 7 .6.1 .4.7 


FUNCTION OF COMPONENT 

PROVIDES A CONTINUOUS VISUAL DISPLAY OF THE ACCUMULATED KILOWATT-HOURS DELIVERED 


BY THE GENERATOR 


FAILURE MODES SEFFECTS ... , , 

i Meter does not operate: meter readings are incorrect. 


APPLICABLE 
OPERATING MODES 


2 Meter indicates high or low: meter readings are incorre ct. 



FAILURE FREQUENCY 

FAILURE F * AI i i ire RATE MEAN TIME 

FAILURE MODE FAILURE RATE, BETVI /EEN FAILURE 
MODE NO FREQ % * 10 PER HOUR (YEARS) 


FAILURE SEVERITY 



MARGINAL 

CRITICAL 

CATASTROPHIC 

II 

III 

IV 

— 




FAILURE DETECTION METHODS 


i -2 Periodic reasonableness check. 


2 


3 



FAILURE CAUSE AND CORRECTIVE ACTION (I F APP LICABLE) 



OPERATING MODES 



Rev. 





Rev. 

10/25/78 

A SHUTDOWN 

0 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 



78 K '6162-001 REV 1 

























MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

LINE KILOWATT - HOUR METER 


SUBSYSTEM 

TOWER - EPS 


FUNCTION OF COMPONENT 

PROVIDES A CONTINUOUS VISUAL DISPLAY OF THE ACCUMULATED KILOWATT - HOURS DELIVERED BY 


THE WTS TO THE UTILITY 


failure ^e¥|r & cFoeI C not operate: Metgr readings are incorrect 


APPLICABLE 
OPERATING MODES 


2 Meter indicates high or low: incorrect power used/delivered 


displayed on meter 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
* 10" 6 PER HOUR 

i,2 

100 

1.1 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


FAILURE SEVERITY 


MARGINAL CRITICAL CATASTROPHIC 

II III IV 




FAILURE DETECTION METHODS 


i -2 Visual inspection, periodic calibration checks. 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Rev. 10/18/8 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

c» operate Rev. 1 0/ 25/78 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 




















MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

TOWER - EPS 


COMPONENT PAGE -.eg 

POTENTIAL TRANSFORMER fmeano 7.6. 1 .4.9 


FUNCTION OF COMPONENT 

PROVIDES A 0-115 VOLT SIGNAL PROPORTIONAL TO THE 0-4160 VOLT LEVEL EXISTING AT THE 


miMHi 


F CONNECTION. THIS SIGNAL IS USED BY THE SYNCHRONIZER, VOLTMETER AND THE 


VOITAGE TRANSDUCER 


FAILURE MODES & EFFECTS ... . . . . . 

i Secondary or primary winding is open circuited: No output 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 


FAILURE 
MODE NO 

failure 
mode 
FREQ % 

fai lure rate 
X 10- 6 PER HOUR 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

1 

20 

• 1.1 

500 

2 

80 

1.1 

125 


* 

FAILURE SEVERITY 


MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i WTS Shutdown 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

Failures of potential transformers associated with control or protective relaying 


will result in WTS shutdown: 


Voltage Transducer (voltage regulator 


Underfreauencv Protection 


See FMEA 6.8. 2.1 


See FMEA 6.8. 3. 2 


Svnchroni zer 


Synchronization Check 


tection 


Power Factor Control 




See FMEA 7. 6.1. -3.1 


See FMEA 7. 6. 1.3.1 


See FMEA 6.8.3.10 


See FMEA 6.8.2. 2 


For Metering Errors See FMEAS: 7. 6. 1.4.1, 7. 6. 1.4. 2, 7. 6. 1.4. 5 through 7. 6. 1.4. 8, 



OPERATING MODES 




Rev 10/18/78 
Rev. 10/25/78 

A 

SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B 

TRANSITION TO WARM-UP - 

E 

STANDBY 

H TRANSITION TO FEATHER 

C 

WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 



78-K -6 162-001 REV 1 





































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT PAGE 1 cn 

TOWER - EPS CURRENT TRANSFORMER lbb , . 

fmeano 7.6.1 .4 .10 

FUNCTION OF COMPONENT 

PROVIDES A 0-5 AMP SIGNAL PROPORTIONAL TO THE 0-433 AMP CURRENT IN THE LINE TO WHICH 


IT IS ATTACHED. THIS SIGNAL IS USED BY THE DIFFERENTIAL PROTECTION RELAY, AMMETER 


AND THE CURRENT TRANSDUCER. 


FAILURE MODES & EFFECTS 


APPLICABLE 
OPERATING MODES 


SHORT BETWEEN SECONDARY WINDINGS: INCORRECT TURNS RATIO. 



FAILURE frequency 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY | 

failure 

MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


1 WTS Shutdown 


2 WTS shutdown 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 


Failuresof current transformers associated with control or protective relaying 


will result in WTS shutdown. 


er Protection 


See FMEA 


6 . 8 . 3. 4 


Differential Protection 

See FMEA 

6. 8. 3. 6 & 7.6.1 .3.2 

Power Factor Controller 

See FMEA 

6. 8. 2. 2 

Loss of Excitation Protection 

See FMEA 

6. 8. 3. 9 

Time Over-Current Protection 

See FMEA 

6. 8. 3. 3 

Ground Fault Protection 

See FMEA 

6. 8, 3. 5 

For Metering Errors See FMEAS: 7. 6. 1.4. 3 

through 7.6.1 

.4.8 



NAME G. TRUSK/H. ROTH 


OPERATING MODES 



Rev 1 0/18/78 
- c operate Rev - 1 0/25/78 

A SHUTDOWN 

D 

TRANSITION TO STAND8Y 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K-b162-001 REV 1 























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

TOWER - EPS 

COMPONENT 

GENERATOR TOTAL RUNNING HOURS 

PAGE 161 

FMEANO 7.6.1 .4.11 

FUNCTI ON OF COMPONE NT 

PROVIDES A CONTINUOUS VISUAL DISPLAY OF THE TOTAL ACCUMULATED HOURS 

OF OPERATION OF 

THE GENERATOR 


FAILURE MODES & EFFECTS . . . ^ . 

i Does not run or quits running:- No direct display of correct 


APPLICABLE 
OPERATING MODES 


2 Accumulate time too fast or slow: incorrect display of genera- 


tor running time 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

F,AI LURE RATE 
x ICT 6 PER HOUR 

1-2 

100 

6.8 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i-2 Visual and calculations. 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 


Check wiring continuity to potential transformer, repair if needed; 


replace clock if required. 



OPERATING MODES 


- 


Rev. 10/18/8 
Rev. 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANOBY 

G ^OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 






























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

TOWER - EPS 

BTC OPERATING CYCLES 


FUNCTION OF COMPONENT 


PROVIDES A CONTINUOUS VISUAL DISPLAY OF THE NUMBER OF OPERATING CYCLES ON THE BUS TIE 


BREAKER^ THIS IS MANDATORY DATA REQUIRED FOR BTC PREVENTATIVE MAINTENANCE . 


FA'^ URE (^o°es E Snb!; FF register count: operating cycle data for the BTC is 


incorrect 


2 Misses cycle counts. Operating cycle data for the BTC is 


incorrect. 


applicable 
OPERATING MODES 




failure frequency 

FAILURE 
MODE NO 

FAI LURE 
MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

1 &2 

100 

6.8 


MEAN TIME 
BETWEEN FAILURE 
( YEARSI 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i & 2 Visual 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 

Operating cycle data is used for maintenance purposes, maximum time interval to 
BTC contact inspection and refurbishment will also be used. 



OPERATING MODES 



Rev. 

10/18/8 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

Rev. 

G OPERATE 

10/25/78 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 



78 K 6162-001 REV 1 
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MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

TOWER - EPS 

COMPONENT 

4.16 kv TO 480 VOLT TRANSFORMER 

page 167 

FMEANO 7.6.1 .5.1 

FUNCTI ON OF COMPONE NT 

PROVIDES ALL OF THE ACCESSORY 

POWER USED IN THE WTS 




FAILURE MOOES & EFFECTS 


I I !■ I ■ III Mil ■ I 


2 Internal short circuit: input fuzed manual switch fuses open. 


No output. 


3 Internal ground fault: input fuze 

no output. 



failure frequency 


FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

1 

50 

2 

25 

3 

25 


x 10 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


FAILURE SEVERITY 


MARGINAL 


FAILURE DETECTION METHODS 

- 

* 


i-3 WTS is shut down 


' 


2 



- 

3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

No accessory power available for 




See also FMEAS 6.8.6, 6.8. 7.1 and 6. 8. 7. 2. 6.8.8. 


7. 2. 2. 1-7. 2. 2. 9, 7. 6. 1.6. 2. 7.6.1 .7.3-7. 6.1 .7.5 



name g. TRUSK/H. ROTH 


DATE 8/17/78 


OPERATING MODES 



Rev 

G OPERATE ^ eV ‘ 

10/17/78 

10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 































MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

TOWER - EPS 

component TRANSFORMER 
480 VOLT TO 115/230 VOLT 

PAGE 16 g 

fmeano 7.6. 1.5.2 

FUNCTION OF COMPONENT 

PROVIDES ALL OF THE 115/230 VOLT ACCESSORY POWER USFD IN 

Will MHI 1 A\m 


TRANSITION MECHANISM. 


FAILURE .MODES & EFFECTS 

i No output due to no input: no power for tower 


convenience outlets, houseke 


2 No output due to in 


same as #1. 





APPLICABLE 
OPERATING MODES 


Maintenance 


Maintenance 



FAILURE FREQUENCY 


failure failure rate 
failure mode 

MODE NO FREQ % x 10 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


failure severity 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 


FAILURE DETECTION METHODS 


i -2 None, remotely ' 

71-2 On-site: no lights, stored data or 

shooting/repair equipment. 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 

Portable source of power required to effect troubleshootinq/repai r operations. 


Reset circuit breaker or replace transformer as required. 



OPERATING MODES 


REV 

10/17/78 



Rev. 

10/25/78 

A SHUTDOWN 

D TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F TRANSITION TO OPERATE 

1 FEATHER 


























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

TOWER - EPS 


COMPONENT 

BATTERY 


PAGE 

FMEA NO 7 . 6. 1 . 6. 1 


FUNCTION OF COMPONENT 

PROVIDES UN INTERRUPT I3LE POWER (DC) WHEN POWER FROM OTHER SOURCES IS NOT AVAILABLE. 
SUPPLIES THE ELECTRICAL POWER SYSTEM PROTECTIVE RELAYS AND PORTIONS OF THE CONTROL 
SYSTEM. 


failure ff 1 p | ) ^|‘ r gg|p TS ^js shuts down 


APPLICABLE 
OPERATING MODES 


All 


Overcharged/Overheated. DC output voltage too high 


All 


Under temperature: DC output voltage is too low would result 


in WTS shut down. 


All 


4 Battery Internal Fault: Same as FM 1 if many cells are shorted 


WTS shutdown if open' circuited. 


FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE severity 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

f'ailure rate 

x 10" 6 PER HOUR 

MINIMAL 

MARGINAL 

CRITICAL 

III 

CATASTROPHIC 

IV 

1,4 

70 

11.4 

14.3 

- 


X 


2 

29 

11.4 

34.5 

X 




3 

1 

11.4 

1000 



X 


4 


- 

- 



' 


FAILURE DETECTION METHODS 


WTS shuts down. On-site trouble shooting 


2 On-site inspection of data. 


3 None until needed, then emergency shut down 


4 Same as FM 1 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

Loss of battery supply 48V power results in WTS failsafe shutdown. Battery 


monitoring circuit detects open batterv lin e. 


See also FMEA's 6.6.2.10. 6.8. 8. 4. 7.6.1. 6.2 and 7.6.1.7 6 


name G. TRUSK/H. ROTH 


DATE 8/17/8 


Rev. 10/17/8 
Rev .— T0/-25/-76- 

G OPERATE 

H TRANSITION TO FEATHER 4/T/7Q 
I FEATHER 7 


OPERATING MODES 


A SHUTDOWN 

B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


78-K 6162-001 REV 1 



MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

TOWER -EPS 

COMPONENT 

BATTERY CHARGER 

"pagTttd 

FMEANO 7.6 1.6.2 

FUNCTION OF COMPONENT 

WHEN ENERGIZED, MAINTAINS THE BATTERY IN A STATE OF FULL CHARGE AND : 

SUPPLIES UNINTERRUI 

ABLE POWER (DC). 



FA ^m» ES r & e^ E n c s TS h ig h (not regul ating properly): Battery overcharge 

DC voltage is high. 


2 Output low (not regulating properly)- DC voltage is low and 


battery is undercharged. 


3 No output, battery will be discharged, WTS will shut down. 




failure frequency 


failure 
MODE NO 


MEAN TIME 
BETWEEN FAILURE 
(1 EARS) 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

If 

CRITICAL 

HI 

CATASTROPHIC 

IV 


2 

25 

3 

50 



FAILURE DETECTION METHODS 


i None - Requires on-site check 


2 None - requires on-site check (if very 1 2 3 iOW, WTS may shut down). 


3 WTS shutdown (after battery discharges) 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

Periodic inspection 



OPERATING MODES 




Rev 

10/17/8 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

Rev. 

10/25/78 

8 TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

TOWER - EPS 

BATTERY HEATER 


FUNCTION OF COMPONENT 

MAINTAINS THE BATTERY TEMPERATURE AT OR ABOVE THE MINIMUM ACCEPTABLE LIMIT WHICH IN 


TURN MAINTAINS THE BATTERY OUTPUT VOLTAGE. HEATER IS ENERGIZED BY THE ACCESSORY 


POWER SYSTEM. 


FAILURE MODES & EFFECTS . . . CMlrA 

i Heater is open circuit: Battery may be too cold. (See FMEA 


-applicable 

OPERATING MODES 



ail*! 

- 

ower available: Same as #1 





FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 

mode 

FREQ % 

FAILURE RATE 
X 10 -6 PER HOUR 

1 

50 

2.3 


MEAN TIME 
BETWEEN FAILURE 
' (YEARSI 


MINIMAL 

I 


FAILURE SEVERITY 


MARGINAL 

II 



CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i & 3 None until battery power is needed. 


2 None until battery is destroyed or maintenance personnel inspect. 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

1 & 3 Redundant heaters are provided. 


2 Periodic inspection of battery electrolyte level and case temperature 


is necessar 


See also FMEA 7. 6. 1.6. 2 



name G. -TRUSK/H.' ROTH 


DATE 8/17/8 


OPERATING MODES 

A SHUTOOWN 

D 

TRANSITION TO STANDBY 

Rev 

Rpy 

G OPERATE * 

10/17/8, 

10/25/78 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 

































SUBSYSTEM 

TOWER - EPS 


FUNCTION OF COMPONENT 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

HIGH VOLTAGE INPUT BUS 


PAGE 172 

FME A NO 7 . 6. 1 . 7. 1 


PROVIDES A POINT OF CONNECTION FOR THE INCOMING HIGH VOLTAGE POWER CABLES AND A PATH 


FOR POWER FLOW TO THE GENERATOR SIDE OF THE BUS TIE BREAKER. 


FAILUREJVtODES & EFFECTS I APPLICABLE 

, llpen circuit: WTS will not enter operate mode or will shut downj. operating modes 


Short circuit. Same as #1 


Grounded conductor: Same as #1 




failure frequency 

failure I faiiurerate " MEAN TIME 
failure mode failure rate between failure 


MODE NO FREQ % * 10 PER HOUR 


(YEARS) 


FAILURE SEVERITY 

MINIMAL 

MARGINAL 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i-3 WTS is shut down. 


2 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

Protective relays prevent BTC from closing or trip the BTC. 



OPERATING MODES 



Rev. 10/17/8 

A SHUTDOWN 

D 

TRANSITION to standby 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

transition to operate 

1 FEATHER 


78 K -6162-001 REV 1 































SUBSYSTEM 

TOWER - EPS 1 HIGH VOLTAGE OUTPUT BUS. 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 


FUNCTION OF COMPONENT 

PROVIDES A POINT OF CONNECTION FOR THE OUTGOING HTGH VOI T / 
PATH FOR POWER FLOW TO TH E UTILITY SIDE OF 


page 173 
FMEANO 7.6. 1.7.2 


IE POWER CABLES AND A 




FAILUREMODES* EFFECTS . , - 

i Open circuit: WTS will not enter operate mode or will shut 


down . 


Short circuit: same as_^f 1 


3 Grounded conductor: same as #1 


APPLICABLE 
OPERATING MODES 




FAILURE FREQUENCY 



failure 
MODE 
FREO % 

FAI LURE RATE 
x 10" 6 PER HOUR 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

50 

1.1 ' 

200 

““25 

1.1 

400 


1 1.1 

400 


FAILURE SEVERITY 

MINIMAL 

1 

marginal 

II 

CRITICAL 

Ml 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i -3 WTS is shut down. 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

1-3 Control system will not permit "operate" mode if utility power is sensed as 


not present or diff. prot. will trip BTC. 


See also FMEA 7.2. 1.1 through 7. 2. 2. 9. 



NAME G. TRUSK/H. ROTH 


DATE 8/17/78 


OPERATING MODES 



REV 

10/17/78 

A -SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE ^ eV • 

10/25/78 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 




























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

component 480 VOLT ACCESSORY 

PAGE 174 

TOWER - EPS 

POWER CIRCUIT BREAKER PANEL 

FMEA NO 7.6.1 .7 


FUNCTION OF COMPONENT 

PROVIDES A PATH FOR THE FLOW OF 480 VOLT ACCESSORY POWER WITHIN THE BUS 


TIE BREAKER. 


FAILURE MODES & EFFECTS 

i Ooen circuit.: I 




APPLICABLE 
OPERATING MODES 


2 Short circuit, circuit breaker trips then same as No. 1 


3 Conductor grounded-' Same as No. 2 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE 
MODE NO 

fai LURE 
MODE 
FREQ % 

FAILURE rate 
X 10" 6 PER HOUR 

1 

50 

1.1 

200 

2 

25 

1.1 

400 

3 

25 

1 .1 

400 



MINIMAL 

I 


FAILURE SEVERITY * 


MARGINAL 


CRITICAL CATASTROPHIC 

III IV 



FAILURE DETECTION METHODS 


i -3 None, remotely 


R 1-3 Onsite: loss of individual function 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



See FMEA 7.2.2. 1 through 7. 2. 2. 9, 6. 8. 7.1 



name h. ROTH/G. TRUSK 


OPERATING MODES 


A SHUTDOWN 
B TRANSITION TO WARM UP 
C-WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


dates/1 7/78 


ev i u/ i 
Rev. 10/25/7 


WMl ll 


78 K -6162-001 REV 1 
































MOD-2 Failure Mode and Effects Analysis 


component 115/230 VOLT ACCESSORY page 175 
POWER CIRCUIT BREAKER PANEL fmeano 7.6. 1.7.4 


SUBSYSTEM 

TOWER - EPS 


FUNCTION OF COMPONENT 

PROVIDES A PATH FOR THE FLOW OF 115/230 VOLT ACCESSORY POWER WITHIN THE BUS TIE 


BREAKER 


feeder to tower. 


2 Short circuit: circui t breaker trips, t hen same as #1. 


3 Grounded conductor: same as #2. 



FAILURE frequency 

MEAN TIME 
BETWEEN FAILURE 
(YEARS! 

FAILURE SEVERITY * 

failure 
MODE NO 

failure 
MODE 
FREQ % 

FAILURE RATE 
x 10"® PER HOUR 

MINIMAL 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 


2 

25 

3 

25 



FAILURE DETECTION METHODS 


i - 3 None, remotel' 


1 1-3 On-site: loss of individual function 


; 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APP LICABLE) 

*See individual FMEA sheets. 


OPERATING MODES 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

REV XU/ ITJTo 

Rev. 10/25/78 

G OPERATE 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARMUP 

F 

TRANSITION TO OPERATE 

1 FEATHER 






























SUBSYSTEM 

TOWER - EPS 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

UNINTERRUPTABLE POWER CIRCUIT 


FUNCTION OF COMPONENT 

PROVIDES A PATH FOR THE FLOW OF 

HVJ JIJNkl ivJ m Fa 1 *J V V mMl 7 1 m sV 

WITHIN 

THE BUS TIE BREAKER. 


FAILURE MODES & EFFECTS 

i Open circuit: power not aval 


relays in BTCU or 


2 Short circuit: sa 




applicable 
OPERATING MODES 



FAILURE FREQUENCY 



FAILURE 
MODE 
FREQ % 

FAILURE RATE 
* tO* 6 PER HOUR 

50 

1.1 

25 

1.1 

25 

1.1 




MEAN TIME 


FAILURE SEVERITY 


MARGINAL CRITICAL CATASTROPHIC 

II III ' IV 



FAILURE DETECTION METHODS 


i _3 WTS shuts down 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 


See FMEA's 6. 8. 8. 4, 7.2. 2.8. 7. 2.2.9. 



OPERATING MODES 




Rev 10/17/78 
Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

8 TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 






























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

TOWER - EPS 


COMPONENT 

CONTROL CIRCUIT 


PAGE 1 77 
FMEANO 7. 6. 1.7. 6 


FUNCTION OF COMPONENT 

PROVIDES A PftTH FOR THE FLOW OF CONTROL SYSTEM COMMANDS AND DATA WITHIN 
THE BUS TIE BREAKER. 


FAILURE MODES & EFFECTS 

i Open circuit: 


associated' relay- _wi ill ..not fu nction, loss of 


circuit protee-t-ion: l os.s nf status da±a_ 


APP LICABLE 
OPERATING MODES 


F.G. 


2 .Short circuit: Same as No. 1 . -or relay functions inadvertently 

causing WTS % - shutdown. 


JEJL 


Grounded conductor: same as No. 1 


F.G. 


FAILURE FREQUENCY 


FAILURE 
MODE NO 


FAILURE 
MODE 
FREQ % 


50 


Failure rate 
x io" 6 per hour 


2.3 


MEANTIME 
BETWEEN FAILURE 
( YEARS) 


_LO£L 


FAILURE SEVERITY 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL 

III 


CATASTROPHIC 

IV 


25 

25 


2.3 


200 


2.3 


200 


FAILURE DETECTION METHODS 


i -3 WTS shutdown 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

Generator protective circuits will trip the GCB if failure in BTCU 

jeopardizes the generator. 


See also FMEA 7. 2. 3. 2. 


name g. TRUSK/H. ROTH 


DATE 


8/17/78 


OPERATING MODES 


Rev 10/17/78 


A SHUTDOWN 

B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78 K 6162-001 REV 1 



MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT PAGE 178 

TOMER - EPS POWER OUTPUT TRANSFORMER fme a no 7.6.2 


FUNCTION OF COMPONENT 

MATCHES THE OUTPUT VOLTAGE OF THE WTS GENERATION SYSTEM MITH THE VOLTAGE OF THE 


INTERFACING UTILITY POWER TRANSMISSION LINE. 


FAILUR 
1 1 


6pen E cfrcTui E ^e8 winding: WTS shuts down 


APPLICABLE 
OPERATING MODES 


Short circuited windings: WTS shuts down, fused manual discon- 


nect switch fuses open. 


3 Winding shorted to ground, same as #2 


4 Oil overheated- WTS shuts down 


FAILURE FREQUENCY 

failure 
MODE NO 

failure 
mode 
FREQ % 

FAILURE RATE 
x ICf 6 PER HOUR 



FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARSI 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL CATASTROPHIC 

III IV 



FAILURE DETECTION METHODS 


' -4 WTS shuts down 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 

Also FMEA 7.2.1 .4. 



OPERATING MODES 



Rev 10/17/8 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

o operate 10/25/78 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 



















MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT * PAGE 

TOWER - EPS FUSED MANUAL DISCONNECT SWITCH fmeano 7.6.3 


FUNCTION OF COMPONENT 

PROVIDES A MEANS OF TOTALLY ELECTRICALLY ISOLATING THE WTS FROM THE UTILITY AND 


THE CIRCUIT IS OPEN. 


FAILURE MODES & EFFECTS 


APPLICABLE 
OPERATING MODES 


- All 



FAILURE FREQUENCY 


failure 

FAILURE MODE 


FAILURE RATE 


MODE NO FREQ % x 10*° PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE SEVERITY 

MINIMAL 

MARGINAL 

II 

' CRITICAL 
III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i WTS shut down. 


2 Requires manual check. 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! ' 

If switch cannot be closed or if it fuses open. WTS will either shut down or will 


not transition to operate. 


If switch is stuck shut, WTS cannot be disconnected from utility but fused 


protection is still available. Bus tie contactor and generator circuit 


breakers continue to function. 



name G. TRUSK/H. ROTH 


DATE 8/17/78 


OPERATING MODES 




REV 10/17/78 
REV 10/25/78 

A 

SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

a 

TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

c 

WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 




























Page 179 


CONTROL SUBSYSTEM - FAILURE FREQUENCY 


Based on the analysis contained in sheets 180-257, there 
are no catastrophic failure modes that can be caused by a 
control system failure. Trade studies completed during 
conceptual design concluded that a single thread system 
was most cost effective; therefore, no effort has been 
made to compute failure frequencies for individual signal 
lines. The cumulative failure rate for the' entire control 
system is three failures per year. 



MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

CflNTROI SUB SYSTEM (NCV) 

COMPONENT 

POWER FAIL RESTART CKT 

PAGE jgQ 

FMEANO . 7.7.1 

FUNCTION OF COMPONENT 

ORDERLY SHUT DOWN & RESTART OF COMPUTER DURING POWER INTERRUPTION. • 



FAILURE MODES & EFFECTS 

1 TNTFRRUPT LINE SH0R1 




APPLICABLE 
OPERATING MODES 





INTERRUPT. 


PF STATUS FAILS HIGH-CAUSES INITIALIZATION ON POWER FAIL INTERRUP' 



PF STATUS FAILS LOW-CAUSES POWER FAIL EMERGENCY SHUT DOWN ON 


START UP. 


FAILURE FREQUENCY 



FAILURE SEVERITY 


FAILURE 

FAILURE 

MODE 

P Al LURE RATE 

MODE NO 

FREQ % 

x lO - ® PER HOUR 


MEANTIME 

BETWEEN FAILURE MINIMAL 

(YEARS) I 



CRITICAL 

CATASTROPHIC 

III 

IV 



FAILURE DETECTION METHODS 


1 SYSTEM WILL NOT RESTART: POWE 



4 SYSTEM WILL NOT START 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


























MOD-2 Failure Mode and Effects Analysis 


COMPONENT 


IHU I J lit i; » 7:1 »:■ :i I ki 


FUNCTION OF COMPONENT 

STORES AND OPERATES COMPUTER PROGRAM. 



FAILURE MOOES & EFFECTS 

1 C 




APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 


FAILURE failure rate 
FAILURE MODE 

MODE NO FREQ % x 10 PER HOUR 




FAILURE SEVERITY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 




X 

X 



FAILURE DETECTION METHODS 


1 CRT AND SYSTEM DOES NOT RESPOND TO CH 


% UNSAFE CONDITIONS ARISE. 

£ 2. SEE 1 ABOVE. 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 



OPERATING MODES 



Kev IU/Zb/7o 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 
























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 




FUNCTION OF COMPONENT 

PROVIDES CYCLING & SEQUENCING OF COMPUTER FUNCTIONS 



FAILURE MODES & EFFECTS 




KCNDui’Jimra 


CONTROL OUTPUTS 


2 1/10 SEC INT PULSE CD1 

r PARTIAL FAILURE SHORTENING CONTROL CYCLE. 


APPLICABLE 
OPERATING MODES 




FAILURE FREQUENCY 


failure mode URE failure rate 

MODE NO FREQ % x 10 PER HOUR 



FAILURE SEVERITY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

MINIMAL 

1 

MARGINAL 

CRITICAL 

III 

CATASTROPHIC 

IV 


— 


- 




failure detection methods 


11B 


Bn 


1 c 


2 


3 FAULT FLAG SHOWS INCOMPLETE CONTROL CYCLE. 


CRT DOES NOT RESPOND TO CHANGES. 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 



OPERATING MODES 


' 

Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY “ 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANS ITI ON.TO OPERATE - 

1 FEATHER 





























Page intentionally left blank 


MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT 

- ' - 1 SERIAL I/O CKTS . 


FUNCTION OF COMPONENT 

PROVIDES INTERFACE BETWEEN COMPUTER AND CRT TERMINALS. 


PAGE 184 
FMEANO 7.7.5 





FAILURE MODES & EFFECTS 


CONTROL WILL BE INCORRECT. 


2 HARD FAILURE-CRT DISPLAY AND CONTROL INOPERATIVE. 


APPLICABLE 
OPERATING MODES 



FAILURE frequency 


failure faiiurfrate 

FAILURE MODE FAILUHfcHAIt 

MODE NO FREQ % * 10 PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL CATASTROPHIC 

III IV 



FAILURE DETECTION METHODS 


1 DISPLAY 

ERRA1 

[1C 



2 DISPLAY 

DOES 

NOT WORK 



3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

CONTROL SUB SYSTEM (NC 


FUNCTION OF COMPONENT 


COM 

FA 

PONENT 
Tl FAFF 

<;VFTFM 




FAILURE MODES & EFFECTS 






RESET-CAUSES SYSTEM SHUT DOWN 

2 CONTACTS SHORTEI 

D-REDUNDANT SHUT 

DOWN CAPABILITY IS LOST 


APPLICABLE 
OPERATING MODES 




FAILURE FREQUENCY 


failure faiiurerate 

FAILURE MODE PAlLUHbHAIfc 
MODE NO FREQ % x 10 PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARS! 


MINIMAL 

l 


MARGINAL 

II 


CRITICAL CATASTROPHIC 

III IV 



failure detection methods 



failure CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

PRIMAR 





OPERATING MODES 





A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G 

OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H 

TRANSITION TO FEATHER 

c WARM UP 

F 

TRANSITION TO OPERATE 

1 

FEATHER 

























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

CONTROL SUB SYSTEM 


COMPONENT 

RPM SIGNAL 


page THE 
FMEANO 7.7.7 


FUNCTION OF COMPONENT 

PROVIDES RPM DATA FOR THE CONTROL SYSTEM FROM. THE LOW SPEED SHAFT. 


FAILURE MODES & EFFECTS 

1SH0RT CIRCUIT TO GRO UND: CONTROL Will TNnTC ATF "0" RPM RFSIII TTNfi 

IN WTS SHUT DOWN . 


applicable 
OPERATING MODES 


ALL, EXCEPT STAND BY 


2 SHORT CIRCUIT TO VOLTAGE; CONTROL WILL INDICATE MAX RPM RESULTING 
IN WTS SHUT DOWN. - 


ALL 


sOPEN CIRCUIT: CONTROL INDICATES "0" RPM RESULTING IN WTS SHUT- DOWN 


ALL, EXCEPT 
STANDBY 


FAILURE FREQUENCY 


failure 

MODE NO 


failure 

MODE 
FREQ % 


FAILURE RATE 
x 10* 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARSI 


FAILURE SEVERITY 


MINIMAL 

I 


MARGINAL 


CRITICAL 

Til 


CATASTROPHIC 
IV " 


FAILURE DETECTION METHODS 


CONTROL WILL BE IN LOCKOUT MODE 


CONTROL WILL BE IN LOCKOUT MODE 


3 CONTROL WILL BE IN IOCKOUT MOOF 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

FAIL SAFE ALSO MONITORS HIGH RPM. 


NAME R.K. HILDAHL 


DATE 


8/11/78 


OPERATING MODES 


A SHUTOOWN 

B TRANSITION TO WARM UP 
C WARM-UP 


D TRANSITION TO STANDBY 
E STAND8Y 

F TRANSITION TO OPERATE 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78 K 6162-001 REV 1 



SUBSYSTEM 

CONTROL SUB SYSTEM 


FUNCTION OF COMPONENT 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

#1 VIBRATION SIGNAL 


PAGE 187 

FMEANO 7.7.8 



FAILURE MOOES & EFFECTS 

i SHORT CIRCUIT, PRIMARY CONTROL WILL NOT MONITOR. REDUNDANTLY 


SENSORED BY FAIL SAFF SYSTEM. 


2 OPEN CIRCUIT, PRIMARY CONTROL WILL SHUT DOWN WTS 


APPLICABLE 
OPERATING MODES 




FAILURE FREQUENCY 

- 


FAILURE SEVERITY 


FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x 10 -6 PER HOUR 

MEAN TIME 
BETWEEN FAILURE 
(YEARSI 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


1 REQUIRES INSPECTION - 


2 CONTROL- WILL BE IN LOCKOUT MODE. 


3 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 

FAIL SAFE SYSTEM PROVIDES REDUNDANCY 



OPERATING MODES 


Rev 10/25/78 


A SHUTDOWN 

B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F - TRANSITION TO OPERATE 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78 K -6162 -00! REV 1 























SUBSYSTEM 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

H? VIBRATION SIGNAL 


FUNCTION OF COMPONENT 

provides alarm signal for excessive vibration monitored on low speed shaft rear 


NEAR GEAR BOX) BEARING. 


i hihKi i ! saAKi i a u i 


FAILURE MODES & EFFECTS 

i SHORT CIRCUIT: PRIMARY CONTROL MILL NOT MONITOR REDUNDAN T 
SENSORED BY FAIL SAFE SYSTEM. 


2 OPEN CIRCUIT; PR 


applicable 
OPERATING MODES 


FAILURE FREQUENCY 


failure 
failure mode 

MODE NO FREQ % 


FAILURE RATE 
x 10* 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


FAILURE SEVERITY 


MARGINAL 

II 


CATASTROPHIC 

IV 


FAILURE DETECTION METHODS 


1 REQUIRES INSPECTI 


2 CONTROL WILL 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

FAIL SAFE SYSTEM PROVIDES REDUNDANCE 


name R. k. HILDAHL 


DATE 8/11/78 


OPERATING MOOES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITI ON TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 




















MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

BEARING OVERTEMPERATURE #1 


SUBSYSTEM 

CONTROL SUB SYSTEM 


FUNCTION OF COMPONENT 

PROVIDES ALARM SIGNAL FOR LOW SPEED SHAFT FRONT BEARING OVER TEMPERATURE. 


PAGE 189 

FMEANO 7.7 10 



FAILURE FREQUENCY 


failure cam mrf rate 

FAILURE MODE FAIUJHfcHAit 

MODE NO FREQ % xIO PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



failure detection methods 


i REQUIRES INSPECTION 


2 CONTROL WILL BE IN LOCKOUT MODE. 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

FAIL SAFE SYSTEM PROVIDES REDUNDANCY 



OPERATING MODES 



Rev 1 0/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM-UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 

























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT PAGE 

CONTROL SI1B SYSTFM |_ BEARING, OVERTEM.PERATURE if 2 emeano 7 

FUNCTION OF COMPONENT 

PROVIDES OVER TEMPERATURE ALARM SIGNAL FOR LOW SPEED SHAFT REAR (NEAR GEAR BOX) 
BEARING. 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x 10 ' 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 



FAILURE DETECTION METHODS 


1 REOUIR 


2 CONT 


3 


FAILURE SEVERITY 



MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 


x 

- 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

1. FAIL SAFE SYSTEM PROVIDES REDUND 



OPERATING MODES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 1 
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I 


MOO-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

CONTROL SUB SYSTEM 

COMPONENT 

TEETER BRAKE UNLOCK COMMAND SIGNAL 

PAGE 192 

FMEANO 7.7.13 

FUNCTION OF COMPONENT 

PROVIDES COMMAND TO UNLOCK TEETER BRAKE 



OPEN CIRCUIT; CONTROL WILL NOT COMMAND TEETER BRAKE TO UNLOCK 



FAILURE FREQUENCY 


FAILURE MODE !RE FAILURE RATE 
MODE NO FREQ % x 10'° PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


CRITICAL 

III 


CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


1 REQUIRES INSPECTION 


2 REQUIRES INSPECTION 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE , 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 



78 K -6162-001 REV 1 























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT EMER Q ENCY 

ill ■ u n ii'i—w — m 



FUNCTION OF COMPONENT 


COMMANDS EMERGENCY ACCUMULATOR TO FEATHER ROTOR BLADES & SIGNALS FAIL SAFE CKT THAT 


CONTROL SYSTEM HAS SHUT DOWN SYSTEM 


FAILURE MODES & EFFECTS 

i SHORT CIRCUIT: CONTROL WILL ACTIVATE EMERGENCY ACCUM1JI ATOR. 


APPLICABLE 
OPERATING MODES 



SHORT TO VOLTAGE: CONTROL WILL NOT ACTIVATE EMERGENCY ACCUMULATO 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 
MODE 
FREQ % 

FAILURE RATE 
x icf 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


FAILURE SEVERITY 


MARGINAL CRITICAL CATASTROPHIC 

II III IV 



FAILURE DETECTION METHODS 



3 FAIL SAFE DETECTS INVALID SEQUENCE 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

FAIL SAFE SYSTEM PROVIDES RED 


mviMmmuihWMsm 



OPERATING MODES 



Rev 11/1/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

8 TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 

























SUBSYSTEM 

CONTROL SUB SYSTEM ~ 


function of component 

PROVIDES COMMAND TO START HYDRAULIC PUMP 


MOD-2 Failure Mode and Effects Analysis 


component 

PITCH HYD PUMP ON COMMAND SIGNAL 


F A ' LU R E MODE s &T EF.FE CTS cqntrol wrl n q T CQMMAND p UM p QN AND CONTROL WILL 


APPLICABLE 
OPERATING MODES 


FAILURE FREQUENCY 


failure mode RE fail urerate 
MODE NO, FREQ % x 10‘ D PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 


MARGINAL 

II 


CRITICAL - CATASTROPHIC 
III IV 


FAILURE DETECTION METHODS 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 


OPERATING MODES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITl ON TO STANDBY 

G OPERATE - 

B TRANSITION TO WARM UP 

,E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER ' i 


78 K 6162-001 REV 1 



























MOD-2 Failure Mode and Effects Analysis 


COMPONENT 


uEllUl 


PITCH HYD PUMP OFF SIGNAL 


FUNCTION OF COMPONENT 

PROVIDES COMMAND TO TURN OFF HYDRAULIC PUMP. ' ■ . 


page 195 
FMEANO 7.7.16 



OPEN CIRCUIT: CONTROL WILL' NOT COMMAND PUMP, OFF 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

if 

CRITICAL 

111 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


1 CONTROL WILL BE IN LOCKOUT, HYD. PUMP RUNNING 


2 CONTROL WILL BE IN LOCKOUT, HYD. PUMP RUNNING. 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 



OPERATING MODES 





A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G 

- OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H 

TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 

FEATHER 


























SUBSYSTEM 

CONTROL SUB SYSTEM 


FUNCTION OF COMPONENT 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

PITCH SERVO COMMAND SIGNAL 


page ig6 
FMEANO 7.7.17 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x Kf 6 PER HOUR 

MINIMAL 

MARGINAL 1 
M j 

1 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


1 CONTROL WILL 


2 CONTROL WIL 


3 WTS SHUTDOWN 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G - OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM-UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 



























MOD-2 Failure Mode and Effects Analysis 


COMPONENT § 2 


PITCH SERVO COMMAND SIGNAL 


SUBSYSTEM 

CONTROL SUB SYSTEM 


FUNCTION OF COMPONENT 

PROVIDES COMMANDS TO TIP ACTUATOR THAT CONTROLS BLADE TIP #2 


PAGE 197 

FMEANO 7.7.18 



FAILURE FREQUENCY 


FAILURE FAILURE RATE 

failure mode !v 

MODE NO FREQ % x 10*° PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


MARGINAL 
1 1 


CRITICAL 

III 


CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 



3 WTS SHUTDOWN 


4 WTS SHUTDOW 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Kev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

8 TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 




























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM | 

CONTROL SUB SYSTEM 

COMPONENT 

#1 BLADE PITCH POSITION SIGNAL 

pace lg8 
FMEANO 7.7.19 

FUNCTION OF COMPONENT 

PROVIDES POSITION STATUS FOR ONE 

TIP BLADE. 




FAILURE FREQUENCY 


failure mode URE failure rate 

MODE NO FREQ % x 1Cf° PER HOUR 



MEANTIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

MINIMAL 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 




x 

X 

X 



failure detection methods CONTROL TESTS POSITION IN STANDBY MODE. 


1 BLADE TIPS NOT POSITIONED THE SAME, POSSIBLE .CONTROL IN 10CK0UT M0DE_ 

2 SAME AS 1. 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APP LICABLEI 



OPERATING MODES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

8 TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 
























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

CONTROL SUB SYSTEM 


FUNCTION OF COMPONENT 

PROVIDES POSITION STATUS FOR ONE TIP BLADE. 


COMPONENT 

#2 BLADE PITCH POSITION SIGNAL 



FAILURE modes & effects 

1 ONE OR MORE SHORT CIRCUITS: CONTROL WILL NOT POSITION TIPS 


APPLICABLE 
OPERATING MODES 



TIPS TOGETHER; WTS WILL SHUT DOWN 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARSI 

FAILURE SEVERITY 

FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x ICf 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

CRITICAL 

III 

CATASTROPHIC 

IV 



failure detection methods CONTROL TESTS POSITION IN STANDBY MODE. 


1 BLADE TIPS NOT PO SITIONE D THE SAME, POSSIBLE CONTROLJN LOCKOUT _M0DE. 

2 SAME AS 1. 


3 SAME AS 1 . 


FAILURE CAUSE ANO CORRECTIVE ACTION (I F APR LICABLE) 



OPERATING MODES 



Rev IU/2b//« 

A SHUTDOWN 

D 

TRANSITI ON TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 




























SUBSYSTEM 

CONTROL SUB SYSTEM 


FUNCTION OF COMPONENT 

PROVIDES STATUS SIGNAL FOR Rl flnF #1 LOC 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

BLADE LOCKED #1 SIGNAL 


page 200 
fmeano 7.7. 21 


failure modes & EFFECTS 
1 SHORT CIRCUIT- 


APPLICABLE 
_OPE RATING MODES 



FAILURE FREQUENCY - 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE SEVERITY 

MINIMAL - 

MARGINAL 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i REQUIRES 


2 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 


i 

Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE ' 

1 FEATHER 
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MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

PIICH HYD FILTER 


CONTROL SUB 


FUNCTION OF COMPONENT 

PROVIDES STATUS SIGNAL FOR FILTER #1, 2 AND 3 


PAGE 201 

SIGNAL f me a no 7.7.22 



FAILURE FREQUENCY 


FAILURE MODE URE FAILURE RATE 
MOOE NO FREQ % x 10'° PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL 

III 


CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 



OPERATING MODES 


A SHUTDOWN 

B TRANSITION TO WARM UP 
C WARM UP 


ev 10/25 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78 K 6162-001 REV 1 



























MOD-2- Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

CONTROL SUB SYSTEM 

BLADE LOCKED #2 SIGNAL 


FUNCTION OF COMPONENT 

PROVIDES STATUS SIGNAL FOR BLADE #2 LOCK. 



FAILURE MCDFS & EFFECTS 




applicable 
OPERATING MOOES 



FAILURE FREQUENCY 


_ _ fA l 'ri JRE FAILURE RATE 

FAILURE MODE c 

MOOE NO FREa % X Kf° PER HOUR 




MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE SEVERITY 



CRITICAL 

CATASTROPHIC 

III 

IV ' - 




failure detection methods 


’ RFOIIIRES INSP 


2 CONTROL WILL BE IN LOCKOUT MODE. 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 




A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

8 TRANSITION TO WARM-UP 

E 

STANDBY 

H- TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 - FEATHER 






















MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

PITCH HYD OIL TEMP HIGH SIGNAL 


SUBSYSTEM 

CONTROL SUB SYSTEM 


FUNCTION OF COMPONENT 

PROVTDFS INDICATION OF PITCH HYD OIL TEM P. WHEN HIGH 


page 203 
FMEANO 7.7.24 


^CONTROL WILL NOT. MONITOR 


2 OPEN CIRCUIT; CONTROL WILL SHUT DOWN WTS 


APPLICABLE 
OPERATING MODES 




FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

failure rate 
x 10' 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


FAILURE SEVERITY 


MARGINAL CRITICAL CATASTROPHIC 

II III IV 



FAILURE DETECTION METHODS 


1 REQUIRES I'NS 


2 CONTROL WILL BE IN LOCKOUT MODE. 

3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 



78 K -6162-001 REV 1 
























SUBSYSTEM 

CONTROL SUB SYSTEM 


FUNCTION OF COMPONENT 

PROVIDE STATUS SIGNAL FOR PITCH OIL PRESSURE 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT PAGE 204 

PITCH HYD OIL PRESSURE LOW SIGNAL fmeano 7.7.25 



FAILUR ^Hm?f S Mcu e i C f; CONTROL WILL NOT MONITOR 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 


FAILURE MODE URE ^1 UIRE RATE 
MODE NO FREQ % x 10 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE SEVERITY 

MINIMAL 

l 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


1 SIGNAL TEST 


2 CONTROL 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 




OPERATING MODES 

: 


Kev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


























SUBSYSTEM 

CONTROL SUB SYSTEM 


FUNCTION OF COMPONENT 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

PITCH ACCUMULATORS PRECHARGE LOW 


5 

7.7.26 


IMIIIII I ■ ■ I i 1 I M ■ i !■ ■ M M III M 1 I 111 ■ ^ li i nil Bik ■■ I ■ I III 1 ■ 



FAILURE FREQUENCY 


failure mode URE fa, lure rate 

MODE NO FREQ % x10'° PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


FAILURE SEVERITY 


MARGINAL CRITICAL CATASTROPHIC 

II III IV 



FAILURE DETECTION METHODS 


i CONTROL WILL TEST DURING STANDBY AND WILL GO INTO LOCKOUT MODE 


2 CONTROL WILL BE IN LOCKOUT MODE 


3 


failure cause and corrective action of applicable) 
FAIL SAFE SYSTEM PROVIDES REDUNDANCY 



OPERATING MOOES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 























SUBSYSTEM 




MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

PITCH HYD OIL LEVEL LOW SIGNAL 


page 206 
FMEANO 7.7.27 


function of component 

WARNS CONTROL SYSTEM ON LOW OIL LEVEL 



FAILURE MODES & EFFECTS 

1 SHORT CIRCUIT; CONTROL WILL NOT MONITOR 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x 10' 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

II 

i 

CRITICAL 

1 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITI ON TO STANDBY 

G OPERATE 

8 TRANSITION TO WARM UP 

E 

STANDBY 

H- TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 



























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

PAGE 207 

CONTROL SUB SYSTEM 

GEAR BOX OIL TEMP. HIGH SIGNAL 

FMEANO 7-7.28 

FUNCTION OF COMPONENT 




PROVIDES AIARM SIGNAL FOR GEAR BOX OIL TEMPERATURE 


FA V^ft^tiOTrY control will not monitor 

APPLICABLE 
OPERATING MODES 


ALL 

2 OPEN CIRCUIT; CONTROL WILL SHUT DOWN WTS 

ALL 


3 



4 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

failure 
MODE 
FREQ % 

failure rate 
x 10" 6 PER HOUR 

MINIMAL 

1 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 

1 

- 



X 




2 






X 


3 








4 









FAILURE DETECTION METHODS 


1 RFQIITRFS PFRIOOIC INSPECTION 

2 r.ONTROI UITII RF IN LOCKOUT MODE 

3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 


NAME 


OPERATING MODES 


D. KENKMAN 


date 8/11/78 
Rev 10/25/78 


A SHUTDOWN 

B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78 K 6162-001 REV 1 



SUBSYSTEM 

CONTROL SUB SYSTEM . 

FUNCTION OF COMPONENT 


MOD-2 Failure Mode and Effects Analysis 

COMPONENT PAGE 208 ” 

- GEAR BOX OIL PRESSURE LOW SIGNAL fmeanq 7.7.29 


F A I L U ™ S & EFFECTS 


APPLICABLE 
OPERATING MODES 


FAILURE FREQUENCY 

failure mod L e URE paiuire rate ' 

MODE NO FREQ % x 10 PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
" (YEARS) 


MINIMAL 

MARGINAL 

II 

CRITICAL 

III 



x 



X 









CATASTROPHIC 

IV 


FAILURE DETECTION METHODS 

J CONTROL WILL GQ INTO LQCKJWLMQDE 

2 CONTROL HILL BE IN LOCK OUT MODE 

3 

4 

FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 

FAIL SAFE SYSTEM PROVIDES REDUNDANCY 


OPERATING MODES 


A SHUTDOWN 

B TRANSITION TO WARM UP 
C WARM UP 


1 NAME D. KENKMAN 


l DATE 8/11/78 
Rev 10/25/78 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78 K 6162-001 REV 1 



SUBSYSTEM 

CONTROL SUB SYSTEM 


FUNCTION OF COMPONENT 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

GEAR BOX OIL LEVEL LOW SIGNAL 


PAGE 209 

FMEANO 7.7 30 



FA 'Hii S « CONTROL WILL NOT MONITOR THIS SENSOR 


2 OPEN CIRCUIT, CONTROL WILL SHUT DOWN WTS 


APPLICABLE 
OPERATING MODES 




FAILURE FREQUENCY 

failure 

MODE NO 

FAILURE 

mode 

FREQ % 

FAILURE rate 
X 10" 6 per hour 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 



FAILURE SEVERITY 


MARGINAL 


CRITICAL 

III 



failure detection methods 


REQRUIRES PERIODIC INSPECTION 


CONTROL WILL BE IN LOCKOUT MODE 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Kev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K 6162-001 REV 1 
























MOD-2 Failure Mode and Effects Analysis 


, COMPONENT 

GEAR BOX OIL TEMP. LOW 


SUBSYSTEM 

CONTROL SUB SYSTEM 


FUNCTION OF COMPONENT 

PROVIDES ALARM SIGNAL IF OIL TEMP. IS TOO LOW TO OPERATF 


FAILURE MODES & EFFECTS 
1 






PAGE 210 
FMEANO 7.7.31 



APPLICABLE 
OPERATING MOOES 


2 OPEN CIRCUIT; CONTROL WILL SHUT DOWN W 



FAILURE FREQUENCY 


FAILURE SEVERITY 


FAILURE 
FAILURE MODE 
MODE NO FREQ % 


FAILURE RATE 
x 10" 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 



FAILURE DETECTION METHODS 




CRITICAL 

CATASTROPHIC 

III 

IV 




FAILURE CAUSE AND CORRECTIVE ACTION (I F APP LICABLE) 



OPERATING MODES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 
























SUBSYSTEM 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

GEAR BOX OIL FLOW LOW SIGNAL 



FUNCTION OF COMPONENT 

PROVIDES ALARM SIGNAL FOR LOW OIL FLOW 



FAILURE MODES & EFFECTS 
1 




applicable 
OPERATING MODES 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x ICf 6 PER HOUR 


FAILURE SEVERITY 


BETWEEN FAILURE 
(YEARSI 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL CATASTROPHIC 

III IV 



FAILURE DETECTION METHODS 




2 CONTROL WILL BE IN LOCK OUT MODE 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 


li'lllllllldllIHullllH 



OPERATING MODES 



Kev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

. E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITIONTO OPERATE 

1 FEATHER 
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MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

CONTROL SUB SYSTEM 

COMPONENT 

GEAR BOX OIL PUMP ON COMMAND 

page 213 
FMEANO 7.7.34 

FUNCTION OF COMPONENT 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x Hf 6 PER HOUR 


FAILURE SEVERITY 


mean time 

BETWEEN FAILURE 
(YEARS! 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL 

III 


CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


1 CONTROL WILL GO INTO LOCKOUT MODE 


2 CONTROL WILL GO INTO LOCKOUT MODE 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APP LICABLE! 



OPERATING MODES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION to operate 

1 FEATHER 






























SUBSYSTEM ' COMPONENT 

CONTROL SUBSYSTEM GEAR BOX 0 1 

FUNCTION OF COMPONENT 

PROVIDES SIGNAL TO TURN OFF GEAR BOX OIL PUMP 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

GEAR BOX OIL PU MP OFF COMMAND 




FAILURE FREQUENCY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x Iff 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
. (YEARS) 


FAILURE SEVERITY 


MARGINAL CRITICAL CATASTROPHIC 

II III IV 



FAILURE DETECTION METHODS 


1 CONTROL WILL BE IN LOCKOUT MODE 


2 CONTROL WILL BE IN LOCKOUT MODE 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


























SUBSYSTEM 


IMIKllMIlMniUKwMia&l 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

ROTOR BRAKE COMMAND SIGNAL 


FUNCTION OF COMPONENT 

PROVIDES SIGNAL TO ACTIVATE WTS ROTOR 



FAILURE FREQUENCY 


failure mo'de^ faiujrerate 

MODE NO FREQ % x 10"° PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARSI 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL CATASTROPHIC 

III IV 



FAILURE DETECTION METHODS 


1 CONTROL WILL BE IN LOCKOUT MODE 


2 CONTROL WILL BE IN LOCKOUT MODE 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE] 

ALSO MONITORED AND CONTROLLED BY FAIL SAFE SYSTEM 



OPERATING MODES 



Rev 

10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 


B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


























Page 216 


This page intentionally left blank. 


SUBSYSTEM 

CONTROL SUB SYSTEM 


FUNCTION OF COMPONENT 

INDICATES POSITION OF ROTOR BRAKE 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

POTOR BRAKE UNLOCKED SIGNAL 


PAGE 217 

FMEANO 7.7.38 



FAILURE MODES & EFFECTS 

1 SHORT CIRCUIT: CONTROL WILL ACT AS THOUGH BRAKE IS IN LOCKED 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 

failure 

MODE NO 

failure 
MODE 
FREQ % 

FAILURE rate 
X 10‘ 6 PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARS! 


CRITICAL CATASTROPHIC 

III IV 




FAILURE DETECTION METHODS 


c 


lllillllllIC(lllllij]l] 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Rev 10/25/78 

A SHUTOOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 




























SUBSYSTEM 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

GENERATOR FIELD ENABLE SIG 


218 

FMEANO / 


FUNCTION OF COMPONENT 

ENABLES THE GENERATOR TO PRODUCE POWER 



FAILURE MODES & EFFECTS 




WILL GO INTO LOCKOUT 


2 OPEN CIRCUIT; GENERATOR WILL NOT GENERATE OUTPUT POWER AND THE 


WTA WILL GO INTO LOCKOUT 


3 


APPLICABLE 
OPERATING MODES 




FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 
MODE 
FREQ % 

FAILURE RATE 
x Kf 6 PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL 

III 


CATASTROPHIC 
“ IV 



FAILURE DETECTION METHODS 


1 CONTROL WILL GO INTO LOCKOUT MODE 


2 CONTROL WILL GO INTO LOCKOUT MODE 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 



operating modes 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G 

OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H 

TRANSITION TO TEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

' 

FEATHER 




























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 


COMPONENT 


page 229 


CONTROL SUB SYSTEM 


GENERATOR OUTPUT SIGNAL 


FMEA NO 


7.7.40 


FUNCTION OF COMPONENT 


PROVIDES ANALOG SIGNAL TO CONTROL SYSTEM PROPORTIONAL TO GENERATOR OUTPUT 


FAILURE MODES & EFFECTS 

1 SHORT CIRCUIT : CONTROL WTI 1 RECFTVF NO OUTPUT OR LOW AND SHUTS 

APPLICABLE 
OPERATING MODES 

WTS OOWN 


2 OPEN CIRCUIT; CONTROL WILL RECEIVE NO OUTPUT AND SHUT WTS DOWN 

\ 

\ 


3 HIGH RESISTANCE; OUTPUT SIGNAL WILL BE IN ERROR AND Af.TIIAI OUTPUT 

V 

WILL BE EITHER HIGHER OR- LOWER THAN FXPFCTFD ‘ 

4 



FAILURE FREQUENCY 

MEAN TIME 
8ETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x 10 -6 PER HOUR 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 

1 






X 


2 

- 





X 


3 




X 




4 









FAILURE DETECTION METHODS 


1 CONTROL WILL GO INTO LOCKOUT MODE 

2 CONTROL MILL GO INTO LOCKOUT MODE 

3 MAY REQUIRED PERIODIC INSPECTION 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 


OPERATING MODES 

A SHUTDOWN 

8 TRANSITION TO WARM UP 
C WARM UP 


NAME 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


KENKMAN 


DATE 


mu 78 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78 K 6162-001 REV 1 



MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 


■ Mill — M 



COMPONENT 


■iiiiaimriHPro 




FUNCTION OF COMPONENT 

PROVIDES UTILITY POWER STATUS TO CONTROL SYSTEM 



FAILURE FREQUENCY 

FAILURE I cam , mE rate meantime 

FAILURE MODE FAILUHt BETWEEN FAILURE 

MOOE NO FREQ % x 10"” PER HOUR (YEARS) 


FAILURE SEVERITY 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL 

III 


CATASTROPHIC 

IV 



FAILURE OETECTION METHODS 


1 INSPECTION REQUIRED 


2 WTS WILL NOT START-IN LOCKOUT MODE 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (I F APP LICABLE) 



OPERATING MODES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H - TRANSITION TO FEATHER 

C WARMUP 

F 

TRANSITION TO OPERATE 

1 FEATHER 




























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

CONTROL S1JB SYSTEM 

COMPONENT 

BUS TIE CONTACTOR OPEN SIGNAL 

PAGE 221 
FMEANO 7.7.42 

FUNCTION OF COMPONENT 

PROVIDES STATUS OF THE UTILITY BUS TIE BREAKER 



FAILURE MODES & EFFECTS 

i SHORT CIRCUIT: CONTROL WILL LOSE MONITORING CAPABILITY IF 


applicable 
OPERATING MOOES 



FAILURE FREQUENCY 


FAILURE SEVERITY 


FAILURE 
FAILURE MODE 


FAILURE RATE 


MEAN TIME 
BETWEEN FAILURE 


MODE NO FREQ % x 10 PER HOUR (YEARS! 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL 

III 


CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


2 CONTROL WILL BE IN LOCKOUT MODE 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 



OPERATING MODES 



Rev 1 0/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 

























SUBSYSTEM 

CONTROL SUB. SYSTEM 


FUNCTION OF COMPONENT 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

SYNC ENABLE SIGNAL 


PAGE 222 
fmeano 7 . 7.43 



FAILURE FREQUENCY 


FAILURE SEVERITY 


FAI LURE F . . . . JRF RATE mean TIME 

FAILURE MODE F Al LUHt ha c BETWEEN FAILURE 

MODE NO FREQ % * 10 PER HOUR (YEARS! 


CRITICAL CATASTROPHIC 

III IV 




FAILURE DETECTION METHODS 



2 CONTROL WILL BE TN 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 





A SHUTDOWN 

0 

TRANSITION TO STANDBY 


G OPERATE 

B TRANSITION TO WARM-UP 

E 

STANDBY 


H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 


1 FEATHER 

























SUBSYSTEM COMPONENT PAGE 223 

B SYSTEM BUS TIE DISCONNECT COMMAND SIGNA1 fmeano 7.7.44 


MOD-2 Failure Mode and Effects Analysis 


COMPONENT 


FUNCTION OF COMPONENT 

COMMANDS THE GENERATOR SYSTEM TO DISCONNECT THE GENERATOR OUTPUT FROM THE UTILITY 




PWR LINE 


FAILURE MODES & EFFECT 

s 


sw!ri]:«arif:raiiii 



PWR SYSTEMf GENERATOR) WILL CONTROL - 

. 2 OPEN CIRCUIT; 

DISCONNECT WILL 

OCCUR AND WTS WILL SHUT DOWN 


APPLICABLE 
OPERATING MODES 




failure frequency 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x 10* 6 PER HOUR 

n 

MINIMAL 

MARGINAL 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i SYSTEM WILL NOT RECONNECT AND WILL REVERT TO LOCKOUT MODE 


2 SYNCHRONIZATION WILL NOT OCCUR AND WTS WILL REVERT TO LOCKOUT MODE 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Kev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 






















^ ^ MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

CONTROL SUB SYSTEM 


FUNCTION OF COMPONENT 

PROVIDES REMOTE CONTROL/MONITOR CAPABILITY FOR THE WTS 


COMPONENT 

REMOTE RS 232 SIGNAL 




OPEN CIRCUIT-SAME AS ABOVE 


FAILURE FREQUENCY. 

failure pan urp rate meantime 

FAILURE MODE l-AILUHt Kftit BETWEEN FAILURE 
MODE NO FREQ % x 10”° PER HOUR (YEARS) 


FAILURE SEVERITY 


CRITICAL 

CATASTROPHIC 

III 

IV 



FAILURE DETECTION METHODS 


i INSPECTION 


2 INSPECTION 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 





A SHUTOOWN 

D 

TRANSITION TO STANDBY 

G 

OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H 

TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 

FEATHER 























I 


MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

CONTROL SUB SYSTEM 

COMPONENT 

LOCAL RS 232 SIGNAL 

PAGE 225 
FMEANO 7.7.46 

FUNCTION OF COMPONENT 

PROVIDES MANUAL CONTROL /MONITOR CAPABILITY AT THE WTS SITE 




F a ,lure MODE s & e ffe crs TE ^ I ^ L WILL N0T OPERATE WTS IN MANUAL MODE 


APPLICABLE 
OPERATING MOOES 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x Kf 6 PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL 

III 


CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K 6162-001 REV 1 


























SUBSYSTEM 

CONTROL SUB SYSTEM 


FUNCTION OF COMPONENT 


MOD-2 Failure Mode and Effects Analysts 


COMPONENT 

GROUND INTRUSION SIGNAL 


HMts-control will juot monitor 


2 OPEN CIRCUIT-CONTROL WILL SHUT DOWN NTS 


page 226 
FMEANO 7.7. 47 



applicable 
operating modes 




FAILURE FREQUENCY 

FAILURE p... , |RE RAT r MEANTIME 

FAILURE MODE FAILURE HAIt BE -rvV EEN FAILURE 

MODE NO FREQ % x 10"° PER HOUR (YEARS) 


j FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i REQUIRES INSPECTION 


2/3 CONTROL WILL BE IN LOCKOUT MODE 


3 


FAILURE CAUSE AND CORRECTIVE ACTION UF APPLICABLE) 



OPERATING MODES 




A SHUTDOWN 

D 

TRANSITION TO STAND8Y 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 
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MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

CONTROL SUB SYSTEM 

COMPONENT 

NCU TEMP. LOW SIGNAL 

PAGE 228 

FMEANO 7.7.49 

FUNCTION OF COMPONENT 

PRfH/TDFS Ai ARM SIGNAL WHEN UNDER 

TEMP. OCCURS IN THE NACELLE CONTROL 

UNIT. CONTROL 

SYSTEM WILL WAIT FOR LOSS OF SIGNAL PRIOR TO SYSTEM RESET. 



FAILURE FREQUENCY 


FAILURE SEVERITY 


failure 
FAILURE MODE 
MODE NO FREQ % 


FAILURE RATE 
x 10" 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


FAILURE DETECTION METHODS 


i REQUIRES INSPECTION 


2 /3 CONTROL WILL BE IN WAIT MODE 


/ 

3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 


CATASTROPHIC 

IV 




OPERATING MODES 



Rev 

10/25/78 




Rev 

11/27/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 


C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 



78 K 6162-001 REV 1 

























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

CONTROL SUB SYSTEM 

COMPONENT 

YAW ACCUM PRECHARGE LOW SIGNAL 

PAGE 229 
FMEANO 7.7.50 

FUNCTION 

PROVI 

OF COMPONEf 

DES ALARM_ 

SIT 

SIGNAL FOR LOW ACCUMULATOR PRECHARGE PRESSURE 



CONTROL WILL HOT MONITOR WHILE WTS IS 


OPERATING-IF IN STANDBY-WTS WILL NOT START 


2 OPEN CIRCUIT; CONTROL WILL SHUT DOWN WTS 


3 SHORT TO GROUND-SAME AS 2 


APPLICABLE 
OPERATING MODES 




FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x 10‘ 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


1 CONTROL WILL MONITOR IN STANDBY MODE FOR "NO" PRESSURE AND GO INTO LOCKOUT MODE 


^ /3 CONTROL WILL BE IN LOCKOUT MODE 

3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Kev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 





























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT 

CONTROL SUB SYSTEM YAW OIL LEVEL LOW SIGNAL 


FUNCTION OF COMPONENT 

PROVIDES ALARM SIGNAL FOR LOW HYP OIL LEVEL 


PAGE 230 
FMEANO 7.7.51 



failure frequency 


failure failurfrate 

FAILURE MODE PAILUHEHAIt 

MODE NO FREQ % x 10 PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARSI 



MARGINAL 

II 


CRITICAL CATASTROPHIC 

III IV 



FAILURE DETECTION METHODS 


2 REQUIRES INSPECTION 

^ /3 CONTROL WILL BE IN LOCKOUT MODE 

3 


FAILURE CAUSE ANO CORRECTIVE ACTION (I F APP LICABLE) 



OPERATING MODES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

CONTROL SUB SYSTEM 

COMPONENT 

YAW OIL PRESS LOW SIGNAL 

PAGE 231 
FMEANO 7.7.52 

FUNCTION OF COMPONENT 

PROVIDES ALARM SIGNAL FOR LOW HID. OIL PRESSURE 



FA,l ; URE sWI& E f6TOTS; CONTROL WILL NOT MONITOR WHILE WTS IS 


OPERATING-IF IN STANDBY-WTS WILL NOT START 


2 OPEN CIRCUIT. CONTROL WILL SHUT DOWN WTS DUE TO THE ALARM 


APPLICABLE 
OPERATING MODES 




FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

failure 

MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x 10* 6 PER HOUR 

MINIMAL 

MARGINAL 

M 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i CONTROL WILL MONITOR IN STANDBY MODE FOR "NO" PRESSURE & GO INTO LOCKOUT MODE 
3 CONTROL WILL BE IN LOCKOUT MODE . 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APP LICABLE! 



OPERATING MODES 


DATE 


Rev 10/25/78 


A SHUTDOWN 

B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G - OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78 K -6162-001 REV 1 
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MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT 

CONTROL SUB SYSTEM YAM OIL TEMP, HIGH SIGNAL 


FUNCTION OF COMPONENT 

PROVIDES AN ALARM SIGNAL WHEN THE YAW OIL TEMP. BECOMES EXCESSIVE 



CONTROL WILL NOT MONITOR TEMP. SENSOR 


2 nPFN CIRCUIT: CONTROL WILL SHOT DOWN DUE TO AN ALARM 


APPLICABLE 
OPERATING MODES 




FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

CRITICAL 

III 

CATASTROPHIC 
• IV 



FAILURE detection METHODS 


i REQUIRES INSPECTION 


2 /3 CONTROL WILL BE IN LOCKOUT MODE 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APP LICA8LE) 



OPERATING MODES 



Rev 10/25/78 

A SHUTDOWN 

0 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 

























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

PAGE 235 

CONTROL SUB SYSTEM 

YAW OIL PUMP ON SIGNAL 

fmeano 7.7.56 

FUNCTION OF COMPONENT 

PROVIDES SIGNAL TO TURN ON THE YAW SYSTEMS OIL PUMP 

- 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x Ilf 6 PER HOUR 

1 

MINIMAL 

MARGINAL 

II 

I 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


1 NACELLE WILL NOT YAW AND CONTROL WILL END UP IN LOCKOUT MODE 


SAME AS #1 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 



OPERATING MODES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM-UP 

E 

STAND8Y 

H - TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

CONTROL SUB SYSTEM 

YAW OIL PUMP OFF SIGNAL 


FUNCTION OF COMPONENT 

PROVIDES SIGNAL TO TURN OFF THE YAW SYSTEM OIL PUMP 



FAILURE FREQUENCY 

FAILURE ZTTmre rate mean time 

FAILURE MODE FAILURE HATE BETWEEN FAILURE 

MODE NO FREQ % x 10 PER HOUR (YEARS) 


FAILURE SEVERITY 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL CATASTROPHIC 

III IV 



failure detection methods 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 




Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 


G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 


H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 


1 - FEATHER 





























SUBSYSTEM 




MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

YAW LEFT COMMAND SICNAI 


UB SYSTE 


FUNCTION OF COMPONENT 

COMMANDS THE YAW SYSTEM TO MOVE THE NACELLE IN A LEFT DIRECTION 


page 237 
FMEANO 7.7 58 



FAILURE MODES & EFFECTS 

CIRCUIT CAUSES NACELLE TO TRAVEL LEFT IF PRESSURE IS UP 


APPLICABLE 
OPERATING MODES 



WTS WOULD BE SHUT DOWN 


3 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


’ CONTROL WILL END UP ON LOCKOUT MODE 


2 S 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 



OPERATING MODES 



Rev 10/25/78 

A SHUTOOWN 

D 

TRANSITI ON TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 



























MOD-2 Failure Mode and Effects Analysis 


COMPONENT 

YAW RIGHT COMMAND SIGNAL 


SUBSYSTEM 

CONTROL SUB SYSTEM 


FUNCTION OF COMPONENT 

COMMANDS THE YAW SYSTEM TO MOVE THE NACELLE IN A RIGHT DIRECTION 


FA 'i Uf Mf 1 IWl/Vr huSES NACE LLE TO TRAVEL RIGHT IF PRESSURE IS UP opeTat'.ng^odes 


ALL 


2 OPEN CIRCUIT: NACELLE WILL NOT MOVE RIGHT - _ 



failure frequency 

failure 
mode no 

failure 

MODE 
FREQ % 

failure rate 

x 10 -6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 



FAILURE SEVERITY 


MARGINAL 

II 


FAILURE DETECTION methods 


i CONTROL WILL END UP IN LOCKOUT MODE 


2 SAME AS #1 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 

- 

Rev 10/25/78 

A SHUTDOWN 

D TRANSITI ON TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E STANDBY 

H TRANSITION TO FEATHER 

C-WARM UP 

F - TRANSITION TO OPERATE 

1 FEATHER 



78 K 6162-001 REV 1 






















Page 239 


This page intentionally left blank. 


MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

component FAIL SAFE YAW HYD. PUMP 

page 240 

CONTROL SUB SYSTEM 

OFF COMMAND SIGNAL 

FMEANO 7.7.61 

FUNCTION OF COMPONENT 



TURNS OFF YAW HYD. POWER DURING A 

, FAIL SAFE SHUT DOWN. 



FA, rm S C I RCUtT PREVENTS F/S SYSTEM FROM TURNING HYD PUMP OFF. 


2 OPEN CIRCUIT: CAUSING FAIL SAFE SYSTEM TO TURN HYD PUMP OFF. 


applicable 

OPERATING MOOES 


FAILURE FREQUENCY 

failure fan hrf rate meantime 

FAILURE MODE 1-AILUHfc HA!t BETWEEN FAILURE 

MODE NO FREQ % x 10"° PER HOUR (YEARS! 


FAILURE SEVERITY 

MINIMAL 

1 

n 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 


FAILURE DETECTION METHODS 


i INSPECTION REQUIRED 


2 WTS IN SHUTDOWN MODE FROM PRESSURE FAILURE 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 


name ‘o. Kenkman 


DATE] 1/1/78 


OPERATING MODES 


A SHUTDOWN 
B TRANSITION TO WARM-UP 
C WARM UP 


D TRANSITION TO STANDBY 
E. STANDBY 

F TRANSITION TO OPERATE 


G - OPERATE 

H - TRANSITION TO FEATHER 
I FEATHER 


78 K *6162 -001 REV 1 

























MOD-2 Failure Mode and Effects Analysis^ 


SUBSYSTEM COMPONENT PAGE 241 

CONTROL SYSTEM NCU TEMPERATURE LOW SIGNAL fme a no 7. 7. 6. 2. 


FUNCTION OF COMPONENT I 

PROVIDES INHIBIT TO CONTROL ELECTRONICS DURING LOW TEMP. CONDITIONS THROUGH INTERRUP 


CONTROL . 


fa| lu r emodes&effects T ; control will not MONITO r. 


APPLICABLE 
OPERATING MODES 


OPEN CIRCUIT: INTERRUPT WILL OCCUR AND CONTROL WILL SHUT DOWN 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
* UT 6 PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARSI 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL 

III 


CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


1 REQUIRES INSPECTION. 


2 CONTROL SYSTEM WILL BE INHIBITED. 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

FAIL SAFE SYSTEM IS NOT TEMPERATURE DEPENDANT AND WILL CONTROL DANGEROUS CONDITIONS. 



OPERATING MODES 




A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K«t62-00l REV 1 


























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

CONTROL SUB SYSTEM 

COMPONENT 

#1 WIND SPEED SIGNAL 

PAGE 242 
FMEANO 7.7.63 

FUNCTION OF COMPONENT 

- 



FAILURE modes & effects 

1 SHORT CIRCUIT 




FAILURE FREQUENCY 


failure 
failure mode 

MODE NO FREQ % 


FAILURE RATE 
x Kf 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 


FAILURE SEVERITY 


MARGINAL 

II 



FAILURE DETECTION METHODS 


1 WIND SPEED WILL NOT AGREE WITH #2 SENSOR AND WTS WILL BE SHUT DOWN IN LOCKOUT MODE 


FAILURE CAUSE AND CORRECTIVE ACTION (IF, APPLICABLE) 



OPERATING MODES 



- 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 





























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

CONTROL SUB SYSTEM 

COMPONENT 

n WIND SPEED SIGNAL 

PAGE 243 
FMEANO 7.7.64 

FUNCTION OF COMPONENT 

PROVIDES WIND SPEED DATA FROM #2 

SENSOR 




mwm s 


2 OPEN CIRCUIT 


applicable 
OPERATING MODES 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

failure 
MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 


FAILURE SEVERITY 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


MARGINAL 

II 


CRITICAL 

III 


CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


' WIND SPEED WILL NOT AGRE 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 




A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 



























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM COMPONENT 

r.flNTRni SMB SYSTEM #1 MIND DIRECTION SIGNAL 


FUNCTION OF COMPONENT 

PROVIDES WIND DIRECTION DATA FROM #1 SENSOR 
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FMEANO 7.7.65 



FAILURE FREQUENCY 


failure pan ure rate 
failure mode . PA 'LU HtKAIt 
MODE NO FREQ % x 10 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


FAILURE SEVERITY 


MARGINAL CRITICAL CATASTROPHIC 

II III IV 



FAILURE DETECTION METHODS 


i WIND DIRECTION WILL NOT AGREE WITH #2 SENSOR AND WTS WILL BE SHUT DOWN IN LOCKOUT 


2 

MODE 

3 



FAILURE CAUSE AND CORRECTIVE ACTION (I F APP LICABLE) 



OPERATING MODES 




, 

A SHUTDOWN 

0 

TRANSITION TO STANDBY 

G 

OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H 

TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 

FEATHER 



























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 
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CONTROL SUB SYSTEM 

#2 WIND DIRECTION SIGNAL 

FMEANO 7.7.66 

FUNCTION OF COMPONENT 



— Ili'Hil MBMiH Ml ft] MU W ■ 1 ffli ■ 1 ■ Hi III MMMPWliWPi 




FA, r§« s <OTfF 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 



FAILURE SEVERITY 

failure 

MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

MEAN TIME 
BETWEEN FAILURE 
(YEARSI 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i WIND DIRECTION WILL NOT AGREE WITH #1 SENSOR AND ms WILL BE SHUT DOWN IN LOCKOUT 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 




A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 


component FAIL SAFE GENERATOR 

PAGE 246 

CONTROL SUB SYSTEM 


BEARING OVERTEMPERATURE 

FMEANO 7.7 67 

FUNCTION OF COMPONENT 

PROVIDES ALARM FOR GENERATOR 

BEARING OVERTEMPERATURE. 




FA V RE SH0RT S CIRCUIT - CONTROL WILL SHUT DOWN .WTS- 


2 OPEN CIRCUIT - WILL SHUT WTS DOWN 


SHORTED CONTACT - WILL NOT MONITOR 



FAILURE FREQUENCY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 


MINIMAL 

I 


FAILURE SEVERITY 


MARGINAL 




FAILURE DETECTION METHODS 


1 WTS WILL BE IN LOCKOUT MODE. 


2 WTS WILL BE IN LOCKOUT MODE. 


REQUIRES INSPECTION. 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

. REDUNDANT TO CONTROL SIGNAL. 



OPERATING MODES 




A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER , 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 



























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

CONTROL SUB SYSTEM 

COMPONENT 

FAIL SAFE ENABLE SIGNAL 

PAGE 247 
FMEANO 7.7.68 

FUNCTION OF COMPONENT 



CONTROL SYSTEM TO BELIEVE THAT FAIL SAFE 
SYSTEM IS OPERATING AND CLEAR 


2 OPEN CIRCUIT CAUSING CONTROL TO SHUT DOWN WTS 


APPLICABLE 
OPERATING MOOES 




FAILURE FREQUENCY 

i 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

failure 

MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x Kf 6 PER HOUR 

MINIMAL 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


i INSPECTION REQUIRED 


2 WTS WILL NOT START & GOES INTO LOCKOUT MODE 

3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G - OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K -6162 -OOI REV 1 



























SUBSYSTEM 

CONTROL SUB SYSTEM 


FUNCTION OF COMPONENT 


MOD-2 Failure Mode and Effects Analysis 


component FAILSAFE EMERGENCY ACC. page 248 
PRESSURE LOW SIGNAL fmeano 7.7.69 


THE S TATUS O F THE PITCH EM ERGENCY 


ACCUMULATORS ARE WITHIN LIMITS 


FAILURE MODES & EFFECTS 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 

failure cam urf rate meantime 

FAILURE MODE 1-AILUHtHAie BETWEEN FAILURE 
MODE NO FREQ % x 10 PER HOUR (YEARS) 


FAILURE SEVERITY 



MARGINAL 

II 


CRITICAL CATASTROPHIC 

III IV 



FAILURE DETECTION METHODS 


1 REQUIRES INSPECTION 

2 WTS WILL GO INTO FAIL SAFE SHUT DOWN MODE 

3 


FAILURE CAUSE AND CORRECTIVE ACTION (I F APP LICABLE) 




OUTSIDE OF LIMITS. 



operating modes 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G - OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 



























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

CONTROL SUB SYSTEM 


FUNCTION OF COMPONENT 

ACTIVATES THE EMERGENCY PITCH ACCUMULATOR TO FEATHER THE BLADES 


COMPONENT 

FAIL SAFE PITCH ACCUM SIGNAL 


PAGE 249 
FMEANO 7.7.70 



FAILURE MODES & EFFECTS 

i OPEN CIRCUIT CAUSING BLADES TO FEATHER 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x 10* 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

REDENDANT TO CPU CONTROL 



OPERATING MODES 


DATE 8/9/78 


Rev 10/25/78 


A SHUTDOWN 

B TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78 K 6162-001 REV 1 





























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

CONTROL SUB SYSTEM 

component FAIL SAFE PITCH HYD. 
PUMP OFF COMMAND SIGNAL 

PAGE 250 
FMEANO 7.7.71 

FUNCTION OF COMPONENT 




FAI 1 i Uf ^M E !:!ffiT TS CAUSING FAIL SAFE SYSTEM TO TURN OFF HYDRAULICS. 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

i : - 

failure 

MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x 10" 6 PER HOUR 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 




1 WTS WILL BE IN SHUTDOWN MODE 


- 

- 



2 WTS WILL BE SHUT DOWN I 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

REDUNDANT TO CPU CONTROL 



OPERATING MODES 



Rev 10/25/78 _ 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM-UP 1 

F 

TRANSITION TO OPERATE 

1 FEATHER 

























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

CONTROL SUB SYSTEM 

component FAIL SAFE BEARING TEMP. 
#1 AND #2 SIGNAL 

PAGE 251 

FMEANO 7.7.72 

FUNCTION OF COMPONENT 



FA 'i U ?SilJR¥ E WllEfi!fblUSIN6 FAIL SAFE TO NOT MONITOR SENSOR 


2 OPEN CIRCUIT CAUSING FAIL SAFE TO SHUT WTS DOWN OR STAY DISABLED 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

FAILURE SEVERITY 

FAILURE 
MODE NO 

failure 
MODE 
FREQ % 

FAILURE RATE 
x 10* 6 PER HOUR 

MINIMAL 

1 

MARGINAL 
II | 

CRITICAL 

III 

CATASTROPHIC 

IV 


FAILURE DETECTION METHODS 


1 MANUAL INSPECTION REQUIRED 


2 WTS WILL BE SHUT DOWN IN FAIL 


3 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 



NAME D. KENKMAN 


OPERATING MODES 



Rev 10/25/78 

A SHUTOOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM-UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 





























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

CONTROL SUB SYSTEM 

component FAIL SAFE VIBRATION 
#1 AND #2 SIGNAL 

page 252 
FMEANO 7.7.73 

FUNCTION OF COMPONENT 

ALARMS FAIL SAFE SYSTEM ON EXCESSIVE SYSTEM VIBRATION FOR QUICK SHUT 

DOWN 



FAILURE MODES & EFFECTS 

1 SHORT CIRCUIT CAUSING FAIL SAFE TO NOT MONITOR SENSOR 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 


FAILURE fai ,, IRFRAT e meantime 

FAILURE MODE ► Al LUHt Hft 1 1 BETWEEN FAILURE 
MODE NO FREO % x UP 5 PER HOUR (YEARS) 


MEAN TIME 


FAILURE SEVERITY 


MARGINAL 


CRITICAL CATASTROPHIC 

III IV 



FAILURE DETECTION METHODS 


1 MANUAL I 


2 WTS 


3 



iiumumiii. 


FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANOBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM-UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 





























MOD-2 Failure Mode and Effects Analysis 


component fail SAFE GEAR BOX 
OIL PRESSURE SIGNAL 


SUBSYSTEM 

CONTROL SUB SYSTEM 


FUNCTION OF COMPONENT 

ALARMS FAIL SAFE SYSTEM ON LOW GEAR BOX PRESSURE 


page 253 
FMEANO 7.7.74 



FA ^ UR S E H0RT E c1rCU E IT TS CAUSING FAIL SAFE SYSTEM TO NOT MONITOR SENSOR 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 

MEAN TIME 
BETWEEN FAILURE 
(YEARSI 

FAILURE SEVERITY 

FAILURE 
MODE NO 

FAILURE 
MODE 
FREQ % 

FAILURE RATE 
x 10 -6 PER HOUR 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE! 

REDUNDANT TO CPU CONTROL. SO LOW PRESSURE WILL STILL BE DETECTED 



OPERATING MODES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H - TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K -61 62-001 REV 1 


























MOD-2 Failure Mode and Effects Analysis 


subsystem component FAIL SAFE GEAR BOX 

CONTROL SUBSYSTEM TEMP HIGH .SIGNAL 


function of component 

ACTIVATES FAIL SAFE SYSTEM WHEN GEAR ' BOX OIL TEMPERATURE IS HIGH 


failure mooes & effects 

i SHORT CIRCUIT CAUSING FAIL SAFE TO ACTIVATE AND SHUT DOWN WTS 


. APPLICABLE 
OPERATING MODES ' 



G FAIL SAFE TO ACTIVATE AND SHUTDOWN WTS 

At 1 

- ~ / 
I 

ALL 



FAILURE FREQUENCY 


- 

FAILURE SEVERITY , . 

1 

FAILURE 
MODE NO 

failure 
MODE 
FREQ % 

FAILURE RATE | 
x 10" 6 PER HOUR 

MEAN TIME 
BETWEEN FAILURE 
(YEARS) 

MINIMAL 

l 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 

- 



1 WTS WILL BE STOPPED IN FAIL SAFE SHUT DOWN MODE 



- 

2 INSPECTION WILL BE REQUIRED 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

REDUNDANT TO CPU CONTROL. 



OPERATING MODES 


Rev 10/25/78 

A SHUTDOWN 

B TRANSITION TO WARM UP 
C WARM UP 

D TRANSITION TO STANDBY 
E, STANDBY 

F TRANSITION TO OPERATE 

G OPERATE 

H TRANSITION TO FEATHER 
1 FEATHER 

























MOD-2 Failure Mode and Effects Analysis 


component FAIL SAFE ROTOR 
BRAKE COMMAND SIGNAL 


SUBSYSTEM 

CONTROL SUB SYSTEM 


FUNCTION OF COMPONENT 

APPLIES BRAKE COMMAND SIGNAL TO ACTIVATE _R0JQR J3RAKI 
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FMEANO 7.7.77 



SIGNAL OPEN- CIRCUIT & BRAKE WILL BE ENERGIZED 



FAILURE FREQUENCY 


FAILURE 
FAILURE MODE 
MODE NO FREQ % 


FAI LURE RATE 
x IQ" 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARSI 


FAILURE SEVERITY 

MINIMAL 

1 

MARGINAL 

II 

CRITICAL 

III 

CATASTROPHIC 

IV 



FAILURE DETECTION METHODS 


1 WTS WILL SHUT DOWN & ROTOR WILL NOT TURN 


2 WTS WILL SHUT DOWN AND ROTOR WILL NOT TURN 


3 



OPERATING MODES 



Rev 10/25/78 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 

B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 

C WARM UP 

F 

TRANSITION TO OPERATE 

1 FEATHER 


78 K -6162 -OOI REV 1 


























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

COMPONENT 

CONTROL SUB SYSTEM 

FAIL SAFE OVER SPEED 


FUNCTION OF COMPONENT 

PROVIDES AN ALARM SIGNAL FOR ROTOR OVER SPEED 



FA ' i UR o P M E 0 N° HR CUU-hll SAFE SHUTS DOWN S V STEM 


APPLICABLE 
OPERATING MODES 



FAILURE FREQUENCY 


failure failure rate 

FAILURE MOPE FAILUHtHAIt 

MODE NO FREO % x 10"° PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 



FAILURE SEVERITY 

MINIMAL 

MARGINAL ' 

CRITICAL 

CATASTROPHIC 

1 

II 

III 

IV 

X 



X 



failure detection methods 


i CONTROL WILL BE IN FAIL SAFE LOCKOUT 


2 INSPECTION REQUIRED 



FAILURE CAUSE AND CORRECTIVE ACTION (IF APPLICABLE) 

REDUNDANT TO CPU CONTROL 



OPERATING MODES 


A SHUTDOWN 

8 TRANSITION TO WARM UP 
C WARM UP 


D TRANSITION TO STANDBY 
E STANDBY 

F TRANSITION TO OPERATE 


G OPERATE 

H TRANSITION TO FEATHER 
I FEATHER 


78 K -6162-001 REV 1 

























MOD-2 Failure Mode and Effects Analysis 


SUBSYSTEM 

CONTROL SUB SYSTEM 

COMPONENT 

TEST VAN READY SIGNAL 

PAGE 258 

FMEANO 7.7.79 

FUNCTION OF COMPONENT 

PROVIDES CAPABILITY FOR TEST VAN 

TO SHUT DOWN WTS DURING ALARMS OCCURING UNDER SPECIAL 

TEST CONDITIONS MONITORED BY THE 

TEST VAN. 



FAILURE MODES & EFFECTS 

i SHORT CIRCUIT: TO GROUND: CONTROL WILL SHUT DOWN WTS. 


SHORTED CONTACTS: CONTROL WILL NOT MONITOR TEST VAN READY 



FAILURE FREQUENCY . 

FAILURE 
MODE NO 

failure 

MODE 
FREQ % 

FAILURE RATE 
x 10' 6 PER HOUR 


MEAN TIME 
BETWEEN FAILURE 
(YEARS) 



FAILURE SEVERITY 


MARGINAL 


FAILURE DETECTION METHODS 


1 WTS WILL GO INTO LOCKOUT MODE. 


2 WTS WILL GO INTO LOCKOUT MODE. 


3 REQUIRES INSPECTION 


FAILURE CAUSE’ AND CORRECTIVE ACTION (IF APPLICABLE) 



OPERATING MODES 




- 

A SHUTDOWN 

D 

TRANSITION TO STANDBY 

G OPERATE 


B TRANSITION TO WARM UP 

E 

STANDBY 

H TRANSITION TO FEATHER 


C WARM-UP 

F 

TRANSITION TO OPERATE 

1 - FEATHER 
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Figure 1, MOD-2 Safety System r 

Figure 2, Control System Block Diagram 

Figure 3, Electrical Power System Schematic 

Figure 4, Hydraulic Schematic, Pitch Control 

Figure 5, Hydraulic Schematic, Yaw System 
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Figure 1 , 


MOD-2 Safety System 
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POWER SUPPLY i 


["" ! SAFETY SHUTOOWn"*] 

, assy r 


ITOGIC ASSEMBLY 


MEMORY BOARD 


J i 

EMBLY ~~ 


MICROCOMPUTER 

BOARD 


ANALOG/DIGITAL 
CONVERSION BOARD 


WTS NACELLE MECHANICAL 
/ELECTRICAL SYSTLMS 


{analog interface"] 

I ASSY , J 


SERIAL DIGITAL 
DATA INTERFACE 
, BOARD 


I * ” “1 

| TELEPHONE MODEM; | 

L „ ' 1 


REMOTE UTILITY 
ATTENDANT PRINTER 
KEYBOARD & MOOCM 


CONTROL HOUSE 
CRT TERMINAL 


PARALLEL DIGITAL 
DATA INTERFACE 
BOARD 


CONTROL HOUSE 
MANUAL CONTROL 
PANEL 


I T 

I RELAY INTERFACE 
1 MODULE ASSY F 



WTS CONTROL HOUSE 
ELECTRICAL 
SYSTLMS 


FIGURE 2j CONTROL SYSTEM BLOCK DIAGRAM 
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WIND TURDINE SYSTEM 




Yaw drivo motor 


FIGURE 5, HYDRAULIC SCHEMATIC, YAW SYSTEM 
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BLADE NO. 1 


BL ADE NO . 2 
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APPENDIX C 


MEMO K-6265-SS-487, DATED 18 October, 1978, MOD-2 FAILURE MODE AND EFFECTS ANALYSIS 
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October 18, 1978 
K-6265-SS-487 


w. 

Wiesner 

6. 

Davison 

R. 

Douglas 

J. 

Erickson 

W. 

Engle 

H. 

Davis 


Subject: \ MOD-2 \Fai lure' Mode and Effects Analysis 

.1 \ , \ 


Reference: K-6266-RL-177, Same Subject, Sept. 14, 1978 

i'll , ' , 

The shut down analysis requested in the subject reference has been 
(performed as/part^of/a more comprehensive study on emergency shutdown 
conditions. The following shutdown analyses v^ere performed: 


i 


/ 


Condition 

Description 

#1 

Normal shutdown 

#2 

Emergency shutdown 

#3 

Drop load, emer- 
gency shutdown 

#4 

Control system 
malfunction 
Emergency shutdown 

#5 

One tip jams 
Emergency shutdown 

#6 

Lose one tip 
Emergency shutdown 


Shutdown Procedure 

Feather at 1° per second, 
drop load at 125 kw 

Feather at 4° per second for 6 
seconds and 1° per second 
thereafter, drop load at 125 kw 

Drop load, feather at 4° oer 
second for 6 second and 1° per 
second thereafter 

Power exceeds 2X rated, drop 
load, feather at 4° per second 
for 6 seconds and 1° per second 
thereafter 

One tip jams, feather other tip 
at 6° per second for 8 seconds 
and 1° per second thereafter, drop 
load at 125 kw 

Lose one tip, feather other tip at 
6° per second for 8 seconds and 1° 
per second thereafter, drop load at 
125 kw. 


( 2 ) 


K-6265-SS-487 


The maximum rotor overspeeds resulting from the shutdown condition are 
presented below. 

MAX ROTOR SPEED (RPM) 

SHUT DOWN CONDITION 45 MPH 28 MPH 


#1 

17.530 


17 

,529 

#2 

17.516 


17 

515 

#3 

18.536 

B> 

19 

,771 

#4 

20.016 



#5 

17.519 



#6 

17.526 



o 


D> 

D> 


1.5 gust required to drop load 

Unable to drop load with 1.5 gust 

Have not run these cases but rotor speed should not 
be much different than condition 5 or 6 for 45 mph 
since load is not disconnected. 


Shutdown condition H and #5 correspond most closely to the conditions 
requested in the reference memo. The worst overspeeds result when the 
load is dropped before initiation of the shutdown procedure (Conditions 
#3 and #4). The max overspeed, however, does not exceed 15 percent. 
Under the other shutdown condition, the load is not dropped until the 
aerodynamic torques are small resulting in negligible overspeeds. 
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CABLE RUNS AND SLIP RING ANALYSES 


FAILURE MODE AND EFFECTS ANALYSIS — CABLE RUNS 


CABLE RUN 

SYSTEMS AFFECTED 

FAILURE MODE(S) 

EFFECTS 

Crack Detection- 
Power Cable to 
Motor 

Crack detection system 

Phase-to- phase short or short 
to ground 

Crack detection system dis- 
abled. "No flow"switches 
activate resulting in WTS 
shutdown. 

Crack Detection - 
wires to no flow 
and flow sensor 
switches 

Crack detection system 

Wires short to each other 

Switches disabled such that 
crack would go unnoticed. 

No serious problem since 
upon first WTS shutdown NCU 
would detect a fault and 
inhibit restart. 

Ice detector sig- 
nal cable 

Ice detection system 

Wires short together. 

Wires short together-causes WTS 
shutdown. Wires open-detector 
inoperative-Detector on other 
blade still operative. Short t( 
ground-damaaes NCU I/O module wf 

Control system - 
48 VDC power sup- 
ply cable and 208 
120 VAC power 
supply 

Control system (NCU) 

f 

Power line shorts to ground or 
to negative wire, or an AC shon 
occurs . 

Circuit breaker opens result- 
ing in WTS shutdown. No 
secondary damage. 

(Shutdown initiated by remov- 
ing power to pitch control 
accumulators resulting in 
blade tips feathering) 






en 

g nificant 
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CABLE RUN 

SYSTEMS AFFECTED 

FAILURE MODE(S) 

EFFECTS 

Tip Control 
Cables to each 
Tip (from low 
speed shaft) 

Rotor - Pitch Control 

Worst Case - Short in 
Cable such that tip is 
driven hard over. 

WTS shuts down via micro- 
processor command. Tip still 
under control stops WTS. No 
significant damage to WTS (Mi- 
croprocessor detects rapid 
change in power output and 
large difference in tip posi- 
tions). 

Power cable to 
pitch hydraulic 
motor 

Pitch control and teeter 
brake 

Worst case is loss of power 
to pump motor and subsequent 
loss of hydraulic pressure 

WTS shuts down upon detection 
on loss of pressure. No dam- 
age to WTS. 

Pitch hydraulic 
pump on cable 

Pitch control and teeter 
brake 

Short - wire to wire ; short 
to ground 

Both failures result in pump 
shut down and WTS shut down. 

Pitch and teeter 
brake status sig- 
nals and solenoid 
command signals 

Pitch control and teeter 
brake 

Short such that 115 VAC is 
applied to all. or some lines. 

- - — - 

Possible combinations: 

1. Start-stop solenoids 
disabled-WTS shuts down 
(115 VAC short to ground) 

2. Teeter brake disabled, 

115 VAC line shorts to ground, 
WTS shuts down 

3. Sensors by-passed. NCU 
thinks all status signals are 
o.k. Lack of detection of 
second fault possible until ■ 
WTS has a normal shut down. 
Then it will detect fault 

and not restart. Probability 
of shorting to all related 
sensors is negligible. 
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CABLE RUN 

SYSTEMS AFFECTED 

FAILURE MODE(S) 

EFFECTS 

Generator to 
Generator Accessor 
Unit - Power 
Cable 

Electrical Power 

t 

Short to ground, wire^to- 
wire shorts 

Differential current protec- 
tion relay causes generator 
circuit breaker to open in 
both cases. 

Generator to 
Generator Accessor 
Unit - Sensor 
Outputs 

Electrical Power 
/ 

Short to ground, wire-to- 
wire shorts 

Sensor signals are at 110 VAC 
and a short to ground will 
result in WTS shutdown via 
I/O module opening. 

Wire-to-wire shorts would dis- 
able sensor, and therefore must 
be checked during preventative 
maintenance. A short to the 
exciter will result in ab- 
normal generator output which 
will be detected by the G.A.U. 
resulting in WTS shutdown. 

D.C. power panel 
to Generator 
Accessory 
Unit 

Electrical Power, 
Control s 

.Short to ground. 

Opens circuit breaker result- 
ing in WTS shutdown. 
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CABLE RUN 

SYSTEMS AFFECTED 

FAILURE MODE(S) 

EFFECTS 


Oil Reservoir to 
Gearbox 

Drive Train 

Short to ground or wire-to- 
wire short. 

Short to ground opens I/O or ci 
breaker and WTS shuts down. 
Wire-to-wire short could render 
"oil pressure low" or "oil temp 
high" sensors inoperative, but 
these signals are redundant. 

rcuit 

Envi ronmental 
Control - All 
Cables 

Environmental Control 

Short to ground or phase to 
phase short 

Circuit breaker opens disabling 
fans. Not detected by N.C.U. 
May cause failure in N.C.U. whi 
could result in erroneous sig- 
nals to pitch, yaw or electrica 
controls. Similar to a random 
N.C.U. failure. Fail safe 
system shuts down WTS (see FMEA 
controls for analyses of each 
N.C.U. control line). 

ch 

1 
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CABLE RUN 

SYSTEMS AFFECTED 

FAILURE MODE(S) 

EFFECTS 

Fire Detector 
Cable 

Fire detection and extingu- 
ishing system 

Wire -to- wire short resulting 
in the detector being ineffect- 
ive. 

Fire would not be detected 
until second detector picked 
up smoke. Integrity of wiring 
checked during preventative 
maintenance. Emergency egress 
for personnel provided. 

460 VAC cable fron 
power distribu- 
tion box to yaw 
drive system; 

120 VAC single 
phase 

Yaw drive system 

Short - phase-to-phase or to 
ground 

Circuit breaker opens render- 
ing yaw drive system inoperat- 
ive and resulting in WTS shut 
down as NCU detects that yaw 
drive system is inoperative. 

Yaw drive signal 
and status lines 

Yaw drive system 

Both status and command sig- 
nals are 110 VAC, so wire-to- 
wire shorts are very unlikely. 
A short from any wire to grounc 
possible. 

Shorts to ground result in I/O or 
cuit breaker opening and WTS 
shutdown. Wire-to-wire short 
1 renders command lines or 
status lines inoperative. In- 
operative command line results 
in WTS shutdown via NCU. 

Status signals have back-up 
(i.e., yaw oil pressure low 
results in unresponsive yaw 
system which is detected by 
NCU). 
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t 


CABLE RUN 

SYSTEMS AFFECTED 

FAILURE MODE(S) 

EFFECTS . . 

Generator Acces- 
sory Unit Outputs 
to NCU 

Power output circuits in- 
cluding generator 

Short to ground on any single 
wire. Since all wires but one 
in this cable are at 110 VAC, 
the probability of a wire-to- 
wire short is very small, but 
long term insulation creep 
could result in this failure 
mode. The remaining wire is 
the power transducer. 

Short to ground results in cir- 
cuit breaker opening and WTS 
shutdown via pitch accumulators 
firing and driving blades to 
feather position. 

Results of a wire-to-wire 
short is to render the status 
signal inoperative since 
sensor output would be bypassed 
Can be detected by periodic 
wrap-around check during pre- 
ventative maintenance; second 
failure reguired before any 
problem exists. 

Shorts to the power transducer 
result in immediate WTS shut- 
down via NCU. 

Cables to wind 
sensors 

Yaw system, control system 
at start-up 

Wire-to wire-short or short to 
ground 

Cables from both sensors are 
separated so that a failure 
within one cable causes a dis- 
parity in signals resulting 
in WTS shutdown. 
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CABLE RUN 

SYSTEMS AFFECTED 

FAILURE MODE(S) 

EFFECTS 

NCU to Drive Trair 

Drive Train 

Wire to wire short applies 110 
VAC to other 110 VAC lines or 
to 5 VDC failsafe lines. 

Short of 110 VAC to other 110 
VAC lines would bypass protects 
sensors (bearinq overtemp. 

#1 and #2). Highly unlikely 
and detectable by checking dur- 
ing preventative maintenance. 
Short to 5 VDC lines (overspeed 
and RPM sensors) would result 
in shutdown via N.C.U. 

460 VAC power 
distribution to 
gearbox controls 

Drive train - controls 

Phase to Phase short or short 
to ground 

Circuit breaker fails and WTS 
shuts down. 

NCU to Drive 
Train Oil 
Reservoir 

Drive Train 

Short to ground or wire^to-wire 
short. 

Short to ground results in 
circuit breaker openinq and 
WTS shutdown (all wires are 
110 VAC). Wire-to-wire short 
could disable "oil pressure 
low" line, but it is redundant 
and is therefore not a problem. 
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; CABLE RUN 

SYSTEMS AFFECTED 

FAILURE MODE(S) 

EFFECTS 

208/120 volt 
Power Distribution 
Panel - Housekeep- 
ing Circuits and 
EPS 

Aircraft Warning Lights, 
Generator Protection Cir- 
cuits 

Short to ground, wire-to-wire 
short 

All shorts to ground open cir- 
cuit breakers. Wire-to-wire 
shorts would open circuit 
breaker if different phases 
short together or if 208 volt 
line shorts to 120 volt line. 
Other wire-to-wire shorts have 
no impact 

460 VAC Power Dis- 
tribution Panel - 
Housekeeping Cir- 
cuits 

Generator Heaters, House- 
keeping, 208/120 VAC 
supply 

Short to ground, wire-to-wire 
short 

Same as 208/120 volt cable 
above 

NCU to Yaw Slip 
Rings 

CRT, Ground Intrusion Sy- 
stem, Telephone Line, WTS 
status indicators, Bus Tie 
Contactor 

Short to ground, wire-to-wire 
short 

CRT, telephone and status indi- 
cators not critical functions 
and no significant damage 
occurs. Control wire to Bus 
Tie Contactor shorts to ground 
or open circuit causes Bus Tie 
Contactor to open resulting in 
WTS shtdown. Bus Tie Contactor 
status lines shorts or opens 
results in WTS shutdown. Short 
or open sync, enable line inhi- 
bits WTS start-up. 
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LOW SPEED SHAFT SLIP RING ANALYSIS 


CABLE RUN 

SYSTEMS AFFECTED 

FAILURE MODE(S) 

EFFECTS 

LOW SPEED SHAFT 



All of these shorts result 
in a circuit breaker opening 
and loss of pitch hydraulic 
pressure or pitch control. 
WTS shuts down via hydraulic 
pressure low or erroneous 
pitch position feedback 
signal 

SLIP RINGS 
Rings 1-10 

Power Circuits - 460 VAC 
and 28 volts DC 

Ring to adjacent ring short 

#11 

Command return (ground) 

Short to #10 (280 DC) 
Short to #12 (110 VAC) 

Same as above. 

Fires emergency accumulator 
resulting in safe WTS 
shutdown 

#12 

Accumulator inhibit com- 
mand 

Short to #13 (110 VAC) 

Would prevent firing emergency 
accumulator on one side, but 
second accumulator would fire 
and safely shutdown the WTS. 







FAILURE MODE AND EFFECTS ANALYSIS - CABLE RUNS 


CABLE RUN 

SYSTEMS AFFECTED 

FAILURE MODE (S) 

EFFECTS 

LOW SPEED SHAFT 
SLIP RINGS (Con't 

#13 

Teeter brake unlock 
command 

Short to #14 (110 VAC) 

110 VAC would remain on fail- 
safe emergency accumulator 
status line when shutdown. 

No impact. 

Failsafe Emer- 
gency Accumulator 
Low 

#14 

Highspeed shutdown 

Short to #15 (110 VAC) 

Short would give false signal 
indicating that emergency ac- 
cumulator pressure to fail- 
safe system was normal when 
it could be failed. 

NCU signal is redundant with 
with this function and would 
shut down WTS. Failsafe wir- 
ing should be checked every 2 
months. 

Failsafe Emer- 
gency Accumulator 
Return 

#15 

Highspeed shutdown 

Short to #16 (110 VAC) 

Same as #14 above. 
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CABLE RUN 

SYSTEMS AFFECTED 

FAILURE MODE(S) 

EFFECTS 

Status signal 
line 

#16 

Pitch Control 

Short to #17 (110 VAC) 

Would not provide oil low 
information, Pressure low 
and/or temperature high would 
result in shutdown. 

Pitch Hydraulic 
Oil Level Low 
#17 

Pitch Control 

Short to #18 (110 VAC) 

Same as #16 above 

Pitch Hydraulic 
Oil Filter Clogge< 

#18 

Pitch Control 

Short to #19 (110 VAC) 

Would not provide oil filter 
clogged information. Filter 
would be by-passed by relief 
valve. 

Pitch Hydraulic 
Pressure Low 

#19 

Pitch Control 

Short to #20 (110 VAC) 

Would not provide pressure 
low information. Would be 
detected by fail-safe system 
and WTS would shut down. 

Pitch Hydraulic 
Oil Temperature 
High 

#20 

*S 

s 

Pitch Control 

Short to #21 (110 VAC) 

Would not provide oil tempera- 
ture high information. If WTS 
performance suffered, the 
control system would detect it. 
No major damage would occur if 
undetected. 
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CABLE RUN 

SYSTEMS AFFECTED 

FAILURE MODE(S) 

- EFFECTS 

Pitch Hydraulic 
Accumulator 
Precharge Pressurt 
Low 

#21 

Pitch Control 

' 

Short to #22 (110 VAC) 

Would not provide status. 
‘Backed up by fail safe 
system 

Pitch emergency 
accumulator gas - 
pressure low 

#22 

Pitch Control 

Short to #23 (110 VAC) 

Would not provide gas pressure 
low signal. Fail-safe system 
backs up this detector. 

(See #14) 

Crack detection 
status signal 

#23 ' 

Crack detection . 

Short to #24 (110 VAC) 

% 1 

Would not provide crack de- 
tection capability. 

Crack detection 
status signal 
return \ , 

#24 

Crack detection 

Short to #25 (110 VAC) 

Same as #23 above 

Emergency Accum. 
Inhibit Command 

#25 

Pitch Control 

Short to #26 (spare) 
Short to #24 (110 VAC) 

No impact 

Same as number 12. 

#26 

Spare 


. 
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CABLE RUN 

SYSTEMS AFFECTED 

FAILURE MODE(S) 

EFFECTS 

Low Speed Shaft 
Slip Rings 27-34 

Ice Detection 

i 

Shorts to adjacent slip rings 

/C* 

Would render one side of rotor 
ice detection inoperative. 
Signals to each detector 
separated so both sides would 
not fail. Test signals checks 
circuit integrity. 

#35 - 36 

Spares 



Servo valve. Tip #1 
#37-41 

Position sensor, 

Tip #1, #42-46 

Servo Valve, Tip 
#2, #44-51 

Position sensor, 

Tip #2, 52-56 

Pitch control 

Slip ring to slip ring short 

WTS would shut down since the 
NCU would detect an error 
between the two blade tip posit 
tions. Worse case would be 
loss of a servo amp in the NCU. 

#57 

Spare 



#58 - 72 

Test Instrumentation 

Slip ring-to-slip ring shorts 

Not a part of the in-line 
WTS functions - would not 
inhibit normal or high speed 
shut downs. 
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CABLE RUN 

SYSTEMS AFFECTED 

FAILURE MODE(S) 

EFFECTS 

YAW SLIP RINGS 

Electrical power 

/ 

Ring-to-ring short 

Short would probably vaporize. 
If not, instantaneous over- 
current and/or ground fault 
relays would trip the gener- 
ator circuit breaker and open 
the bus tie contactor. As a 
back-up, the BTC is fused. 

Ground - #1 & #6 
Primary Power 
out - #2-4 
Neutral - #5 

. 

480 volts A.C. 
#7-9 

All systems that utilize 
480 and 240/120 VAC. 
(Controls, electrical) 

Ring-to-ring short 

Minor shorts (a wire strand) 
would vaporize. A major 
short would trip the 480 VAC 
circuit breaker(s) resulting 
in WTS shutdown. 

48 VDC lines 
#10-13 

Control system 

Ring-to-ring short 

Loss of 48 VDC to controls 
would result in shutdown. 

The uninterruptable power to 
the BTC would be maintained 
since there is a fuse between 
the battery output and the 
slip rings, but the wire to th< 
BTC is on the battery side 
of the fuse. 
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CABLE RUN 

SYSTEMS AFFECTED 

FAILURE MODE(S) 

EFFECTS 

YAW SLIP RINGS 
Fault current 

wsi n 9 ,ft v,ce 

Electrical power 

Short to #15 (low level cur- 
rent is on #15 - differential 
CT). 

Would create imbalance which 
would triqger differential 
CT. 

Differential CT 
0A #15 

Electrical Power 

Short to #16 (FCLD) 

Same as #14 above 

Fault current 
Limiting device 
#16 

Electrical power 

Short to #17 (low level 
current) 

Same as #14 above 

Differential CT 
0B, 0C and 
Common 
#17, 18, 19 

Electrical power 

t 

Ring-to-ring shorts 
17-18, 18-19 
Short #19 - #20 

Same as #14 above 

Sync. Enable 
Relay #20 

Electrical Power 

Short to #21 (BTC 
Tripping relay - 110 VAC 
when closed). 

No impact on sync, enable 
relay since it already has 
110 VAC applied. No impact 
on the BTC relay since it too 
has 110 VAC applied when 
rotating. During shutdown, 
both #20 and #21 have ”0" 
volts applied, so no impact 
from a short. 
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CABLE RUN 

SYSTEMS AFFECTED 

FAILURE MODE (S) 

EFFECTS 

YAW SLIP RINGS 

Electrical Power 

Short to ring #22 

Would short I/O module and 
disconnect BTC resulting in 
WTS shutdown. 

BTC Tripping 
Relay - #21 

Command return 
#22 (from BTC and 
sync, enable 
relay.) 

Electrical Power 

Short to #23 

None, #23 is a spare 

Spares - #23 
and #24 

- 

- 

- 

Generator Circuit 
Breaker (GCB) 
Closed indicator 
return #25 

Electrical Power 

Short to #26 (Generator field 
current meter) 

Would apply 48 VDC to the 
Generator Field Current 
meter. Could cause 48 VDC 
circuit breaker to open, 
shutting down the WTS. No 
serious consequences if cur- 
rent draw is insufficient to 
trip the breaker. 









FAILURE MODE AND EFFECTS ANALYSIS - CABLE RUNS 


CABLE RUN 

SYSTEMS AFFECTED 

FAILURE MODE(S) 

EFFECTS 

YAW SLIP RINGS 

Electrical Power 

Short to .#27 (48 VDC) 

l 

Same as #25 above. 

Generator Field 
Current Meter (+) 
#26 

Generator Circuit 
Breaker Closed 
Indicator 

Electrical Power 

Short to #28 (current meter) 

Same as #25 above. 

Generator Field 
Current Meter (-) 
#28 

Electrical Power 

... 

Short to #29 (110 VAC) 

Would cause ammeter to act 
eratic. No WTS operational 
consequence. 

BTC Tripped 
#29 

Electrical Power 

Short to #30 (110 VAC) 

Would incorrectly indicate that 
the BTC was closed when it was 
opened. NCU will detect and 
lock out the WTS. 

Utility Power 
Present #30 

Electrical Power 

_ _ . 

Short to #31 (110 VAC) 

Would indicate that utility 
power was present when it 
wasn't. NCU would not have AC 
power so could not start up. 

If the short occurred during 
operation and subsequently, 
power was lost, the WTS would 
shift from 60 HZ frequently and 
-Shut down. 
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CABLE RUN 

SYSTEMS AFFECTED 

FAILURE MODE(S) 

EFFECTS 

YAW SLIP RINGS 

Electrical power 

Short to #32 (110 VAC) 

'lone. #32 is the instrumenta- 
tion van signal that is either 
at "0" or 110 VAC. In opera- 
tional use, this line will be 
110 VAC. 

110 VAC for BTC 
signals (Ident. 
#90 and 91 Slip 
ring #31 ) 

Instrumentation 
Van Not Ready 
Signal 
#32 

Instrumentation 

Short to #33 (48 VDC ground 
return) 

dould destroy 110 VAC test sig- 
nal I/O in NCU. No operational 
impact. 

D.C. Return for 
48 VDC signals 
#33 

Manual control panel 
indicators 

Short to #34 (48 VDC) 

Same as #32 above. 

Auto Mode 
Indicator #34 

Manual control panel 
indicators 

Short to #35 (48 VDC or 0) 

Could erroneously indicate that 
the control system was in auto 
node. Would be obvious fault 
since the manual mode light woul 
also be on. 

C/S Enabled 
Indicator #35 

lanual control panel 
indicators 

Short to #36 (48 VDC or 0) 

Could erroneously indicate that 
the WTS was shut down. In- 
dicatorswould be in conflict 
and failure obvious. 

Shut Down 
Indicator #36 

Manual control panel 
indicators 

Short to #37 (48 VDC or 0) 

Could erroneously indicate that 
the WTS was in manual mode. 
Failure would be obvious. 
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' CABLE RUN 

SYSTEMS AFFECTED 

FAILURE MODE(S) 

EFFECTS 

YAW SLIP RINGS 

l 

Manual control panel . 

'■ 

i- 

Short to #38 (110 VAC or "0") 

Would put 48 VDC onto 110 VAC 
line, if in manual mode. Could 
damage NCU I/O Module, but 
would not result in secondary 
damage. 

Manual mode 
indicator #37 

Shutdown Switch 
#38 

Manual control o'f WTS 

• 

Short to #39 (110 VAC) 

i ‘ 

Both lines are at 110 VAC or 
one is at 0. Shutdown would 
occur if short happens while 
running. , 

120 VAC supply 
#39 

Manual control panel 

Short to #40 (48 VDC) 

Could damage NCU I/O module. 

No secondary damage. Failure 
would be obvious since several 
functions on the panel would 
be disabled. 

Emergency Stop 
#40 & 41 

Manual control panel 

Short to #41 and/or 42 

By-passes switch and stops WTS. 
Short to #42 could damage NCU 
1/0.. No other damage. 

Ground Intrusion 
Swi tch 
#42 and 43 

Ground Intrusion 

' 

Short to #43 or #44 

Would erroneously indicate a 
ground intrusion. Short to 
#44 no problem. 

(#44 is a spare) 



‘ 
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CABLE RUN 

SYSTEMS AFFECTED 

YAW SLIP RINGS 

None - Spares 

#44 - 51 



Remote telephone 
lines #52 - 56 

Communications to remote 
utility control console 

Local CRT 
#57 - 61 

Local CRT signals 

#62 - 120 

Test Signals - used dur- 
ing initial test only. 
Disabled prior to turn- 
over. 


FAILURE MODE(S) 


EFFECTS 


Ring-to-ring shorts. All 
circuits are low level TTL. 


Loss of communications with 
site- No damage to WTS. 


Ring-to-ring shorts. Loss of information to local 

Circuits are low level TTL. CRT. No damage to WTS. 


/ 
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